Red Hat Security AdvisoryRHSA-2014:0440
Red Hat Enterprise MRG Grid 2.5 security, bug fix, and enhancement update
Released 2014-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.8.10-0.1.el6, condor-classads-7.8.10-0.1.el6, condor-kbdd-7.8.10-0.1.el6 +3
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.8.10-0.1.el6, condor-classads-7.8.10-0.1.el6, condor-kbdd-7.8.10-0.1.el6 +3
- Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.8.10-0.1.el6, condor-aviary-7.8.10-0.1.el6, condor-classads-7.8.10-0.1.el6 +10
- Red Hat MRG Management for RHEL 6 ComputeNode v.2 mrg-release-2.5.0-1.el6
- Red Hat MRG Management for RHEL 6 Server v.2 cumin-0.1.5797-1.el6, mrg-release-2.5.0-1.el6
- Red Hat MRG Messaging for RHEL 6 Server v.2 mrg-release-2.5.0-1.el6
- Red Hat MRG Realtime for RHEL 6 Server v.2 mrg-release-2.5.0-1.el6
Fixes 2 records
Priority LOW 35
The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column nam…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03894 · Published 2014-03-06 · Partial fix CWE-20
Priority LOW 25
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01148 · Published 2014-04-30 · Fixed CWE-310
