GSVG Advisories 2010

The GSVG produces advisory notices for Grid security vulnerabilities, and these are published below. Release notes should refer to advisories

Notes on advisories advisories from 2007 and 2008
Notes on Risk advisories from 2009
release notes for gLite 3.1 distribution release notes for gLite 3.2 distribution

Date Title Advisory Risk Status
01/12/08 updated 03/03/10 LCAS/LCMAPS vulnerability affecting Condor CE advisory-35858.txt High Fixed
16/02/10 Argus may allow a banned user under heavy load advisory-56758.txt Low Fixed
13/08/07 updated 19/01/10 DN information leak on the RB/WMS advisory-18049.txt Low Obsolete
11/01/10 gLite-ce-blahp command injection vulnerability advisory-55825.txt Moderate Fixed
11/01/10 Possible Privilege escalation inside Torque advisory-42652.txt Moderate Fixed

** issues which were originally handled before the start of EGEE-II and not re-assessed with the EGEE-II criteria.

Status Explanation
Fixed Patches available/fully resolved
Disclosed Disclosed due to reaching Target date
Obsolete S/W no longer in use

GSVG home


Last modified Wed  3 March 2010 . View page history
Switch to HTTPS . Website Help . Print View . Built with GridSite 1.4.3
For more about GridPP please contact Neasan O'Neill