|
|
| (172 intermediate revisions by 5 users not shown) |
| Line 1: |
Line 1: |
| {{svg-header}} | | {{DeprecatedAndMovedTo|new_location=https://advisories.egi.eu/}} |
| | |
| EGI SVG produces advisories according to the EGI SVG issue handling procedure, which was revised in autumn 2015.
| |
| | |
| All advisories which are disclosed publicly by SVG are placed on this wiki.
| |
| | |
| In the past (up to the end of 2015) CSIRT also issued general alerts at https://wiki.egi.eu/wiki/EGI_CSIRT:Alerts
| |
| | |
| and EGI SVG advisories primarily concerned gLite Middleware.
| |
| | |
| | |
| A guide to the risk categories is available at [[SVG:Notes On Risk | Notes On Risk]]
| |
| | |
| Earlier Advisories: [[SVG:Advisories-SVG-2014-2015 | Advisories from 2014 and 2015 ]]
| |
| | |
| Earlier Advisories: [[SVG:Advisories-SVG-2011-2013 | Advisories from 2011 to 2013 ]]
| |
| | |
| {| {{egi-table}}
| |
| !Date !! Title !! Contents/Link !! Risk !! Status !!
| |
| | |
| |-
| |
| | 2016-10-10 || gridsite / canl-c impersonation vulnerability || [[SVG:Advisory-SVG-2016-11476 | Advisory-SVG-2016-11476 ]] || Critical || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-08-25 || KeyStone VOMS does not check CRLs || [[SVG:Advisory-SVG-2016-10558 | Advisory-SVG-2016-10558 ]] || Moderate || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-07-18 ||DIRAC configuration - database passwords visible on dirac interface || [[SVG:Advisory-SVG-2016-11255 | Advisory-SVG-2016-11255 ]] || Up to High || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-07-15 || Two Perfsonar Vulnerabilities announced by the Perfsonar team || [[SVG:Advisory-SVG-2016-11363 | Advisory-SVG-2016-11363 ]] || Moderate || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-07-12 || dCache READONLY and non-/ user root not enforced || [[SVG:Advisory-SVG-2016-11288 | Advisory-SVG-2016-11288 ]] || Moderate || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-06-20 || STORM WebDAV interface XXE vulnerability || [[SVG:Advisory-SVG-2015-10134 | Advisory-SVG-2015-10134 ]] || Low || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-06-20 || dCache WebDAV interface XXE vulnerability || [[SVG:Advisory-SVG-2015-10121 | Advisory-SVG-2015-10121 ]] || Low || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-06-13 || iperf3 used in perfSONAR CVE-2016-4303 || [[SVG:Advisory-SVG-CVE-2016-4303 | Advisory-SVG-CVE-2016-4303]] || Critical || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-06-08 || Vulnerability in IBM's GPFS CVE-2016-0392 || [[SVG:Advisory-SVG-CVE-2016-0392 | Advisory-SVG-CVE-2016-0392]] || Critical || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-06-08 || Arbitrary file overwrite vulnerability in WebAppDIRAC || [[SVG:Advisory-SVG-2016-11033 | Advisory-SVG-2016-11033 ]] || High || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-06-08 || dCache configuration issue || [[SVG:Advisory-SVG-2016-10837 | Advisory-SVG-2016-10837 ]] || High || (Config) ||
| |
| |-
| |
| | |
| | |
| | |
| |-
| |
| | 2016-06-08 || LHCb Setup scripts || [[SVG:Advisory-SVG-2015-9809 | Advisory-SVG-2015-9809]] || Low || Fixed ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-06-07 || Authorization by user_id to manage VMs does not work in V2.1 Nova API for OpenStack || [[SVG:Advisory-SVG-2016-11190 | Advisory-SVG-2016-11190]] || High || ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-05-25 || Dirac Pilot factory payload verification || [[SVG:Advisory-SVG-2014-7440 | Advisory-SVG-2014-7440]] || Low || Migrating from ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-05-25 || PANDA Pilot factory payload verification || [[SVG:Advisory-SVG-2014-7430 | Advisory-SVG-2014-7430]] || Low || Migrating from ||
| |
| |-
| |
| | |
| | |
| |-
| |
| | 2016-04-28 || OpenStack VM management permissions || [[SVG:Advisory-SVG-2016-10636 | Advisory-SVG-2016-10636]] || Moderate || (Config) ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-03-11 || NSS heap buffer overflow vulnerability || [[SVG:Advisory-SVG-CVE-2016-1950 | Advisory-SVG-CVE-2016-1950]] || Critical || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-02-17 || glibc remote code execution vulnerability - CVE-2015-7547 || [[SVG:Advisory-SVG-CVE-2015-7547 | Advisory-SVG-CVE-2015-7547]] || Critical || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-02-03 || Linux Kernel Vulnerability - CVE-2016-0728 || [[SVG:Advisory-SVG-2016-10376 | Advisory-SVG-2016-10376 ]] || High || Fixed ||
| |
| |-
| |
| | |
| |-
| |
| | 2016-01-05 || Linux Kernel Vulnerabilities || [[SVG:Advisory-SVG-2015-CVE-2015-7613 | Advisory-SVG-2015-CVE-2015-7613 ]] || Moderate/High || Fixed ||
| |
| |-
| |
| | |
| |}
| |
| | |
| Advisories from prior to 2011 [https://archive.gridpp.ac.uk/gsvg/advisories/ Gridpp Advisories Archive]
| |
The wiki is deprecated and due to be decommissioned by the end of September 2022.