Updated rabbitmq-server packages fix security vulnerabilities

🗓️ 08 Jun 2015 21:17:51Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 28 Views

Updated rabbitmq-server package fixes XSS and response-splitting vulnerabilitie

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: Vulnerability in Rational Engineering Lifecycle Manager, Rational Software Architect Design Manager and Rhapsody Design Manager (CVE-2014-3037)	17 Jun 201804:56	–	ibm
IBM Security Bulletins	Security Bulletin: Critical security vulnerability in Jazz Team Server affecting Rational Software Architect Design Manager and Rational Rhapsody Design Manager (CVE-2014-0862)	17 Jun 201804:53	–	ibm
IBM Security Bulletins	Security Bulletin: Critical security vulnerability in Jazz Team Server affecting all CLM Applications (CVE-2014-0862)	28 Apr 202118:35	–	ibm
CNVD	Pivotal Software RabbitMQ management plugin cross-site scripting vulnerability (CNVD-2015-00813)	29 Jan 201500:00	–	cnvd
CNVD	Pivotal Software management plugin CRLF injection vulnerability	29 Jan 201500:00	–	cnvd
CVE	CVE-2014-0862	2 Mar 201402:00	–	cve
CVE	CVE-2014-9649	27 Jan 201517:00	–	cve
CVE	CVE-2014-9650	27 Jan 201517:00	–	cve
Cvelist	CVE-2014-0862	2 Mar 201402:00	–	cvelist
Cvelist	CVE-2014-9649	27 Jan 201517:00	–	cvelist

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	4	any	rabbitmq-server	3.5.3-1	rabbitmq-server-3.5.3-1.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
groups	www.groups.google.com/forum/
openwall	www.openwall.com/lists/oss-security/2015/01/27/8
rabbitmq	www.rabbitmq.com/news.html

08 Jun 2015 21:17Current

6.6Medium risk

Vulners AI Score6.6

CVSS 210

EPSS0.17369

rabbitmq security vulnerabilities xss response-splitting package update version 3.5.3