SVG:Advisories
Jump to navigation
Jump to search
Main page | Software Security Checklist | Issue Handling | Advisories | Notes On Risk | Advisory Template | More |
Advisories
EGI SVG primarily issues advisories concerning gLite Middleware.
CSIRT also issues general alerts at https://wiki.egi.eu/wiki/EGI_CSIRT:Alerts
A guide to the risk categories is available at Notes On Risk
Earlier Advisories: Advisories from 2011 to 2013
Date | Title | Contents/Link | Risk | Status | |
---|---|---|---|---|---|
2014-08-05 | Remote access to dCache configuration information | Advisory-SVG-2014-7009 | Moderate | Fixed | |
2014-08-05 | DPM Information Leak Vulnerability | Advisory-SVG-2012-3390 | Low | Fixed | |
2014-08-05 | PerfSONAR web interface vulnerabilities | Advisory-SVG-2013-6052 | Moderate | Fixed | |
2014-08-05 | FTS3 - Lack of Authorization on config commands | Advisory-SVG-2013-5769 | Low | Fixed | |
2014-07-17 | Perfsonar 'Cacti' graphs web vulnerability | Advisory-SVG-2014-7162 | Critical | Fixed | |
2014-06-23 | EMI WMS Impersonation vulnerability | Advisory-SVG-2013-5331 | High | Fixed | |
2014-06-02 | DPM version in EPEL | Advisory-SVG-2014-6963 | High | Fixed | |
2014-04-10 | WN and UI tarballs in the EMI repository contain a version of OpenSSL vulnerable to CVE-2014-016 | Advisory-SVG-2014-6884 | Critical | Fixed | |
2014-04-08 | OpenSSL "Heartbleed" vulnerability CVE-2014-0160 (Link to CSIRT alert) | OpenSSL-2014-04-08 | Critical | Fixed | |
2014-03-27 | Torque Vulnerability: arbitrary code execution via job submission | Advisory-SVG-2014-6627 | High | Fixed | |
2014-03-25 | Vulnerabilities in STORM | Advisory-SVG-2013-6116 | High | Fixed | |
2014-02-13 | Results of CREAM vulnerability Assessment | Advisory-SVG-2013-5813 | High | Fixed |