Security Bulletin: Vulnerability in Apache Cassandra affects IBM Operations Analytics Predictive Insights (CVE-2018-8016)

Summary Apache Cassandra is used by IBM Operations Analytics Predictive Insights. IBM Operations Analytics Predictive Insights has addressed the applicable CVE. Note that the usage of Apache Cassandra within IBM Operations Analytics Predictive Insights is limited to the REST Mediation utility. If...

glusterfs security, bug fix, and enhancement update

3.12.2-18 - fixes bugs bz1524336 bz1622029 bz1622452 3.12.2-17 - fixes bugs bz1615578 bz1619416 bz1619538 bz1620469 bz1620765 3.12.2-16 - fixes bugs bz1569657 bz1608352 bz1609163 bz1609724 bz1610825 bz1611151 bz1612098 bz1615338 bz1615440 3.12.2-15 - fixes bugs bz1589279 bz1598384 bz1599362...

RHEL 6 : glusterfs (RHSA-2018:3431)

Updated glusterfs packages that fix multiple security issues and bugs are now available for Red Hat Gluster Storage 3.4 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score,...

Cross site scripting

JBoss BPM Suite 6 is vulnerable to a reflected XSS via dashbuilder. Remote attackers can entice authenticated users that have privileges to access dashbuilder usually admins to click on links to /dashbuilder/Controller containing malicious scripts. Successful exploitation would allow execution of...

CVE-2016-6343

CVE-2016-6343 affects Red Hat JBoss BPM Suite 6 (dashbuilder). A reflected XSS vulnerability allows an authenticated admin to click a malicious link at /dashbuilder/Controller and execute script code in the user’s browser. The issue relies on dashbuilder’s handling of input in that endpoint; expl...

Oracle Linux 6 : python-paramiko (ELSA-2018-3406)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2018-3406 advisory. - Fix CVE-2018-1000805 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested f...

RHEL 6 : qemu-kvm (RHSA-2018:3401)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3401 advisory. Kernel-based Virtual Machine KVM is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the...

RHEL 6 : python-paramiko (RHSA-2018:3406)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2018:3406 advisory. The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines...

RHEL 6 : java-1.7.0-openjdk (RHSA-2018:3409)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3409 advisory. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Security...

RHEL 6 : libvirt (RHSA-2018:3396)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3396 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In...

RHEL 6 : thunderbird (RHSA-2018:3403)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:3403 advisory. - Mozilla: Proxy bypass using automount and autofs CVE-2017-16541 - Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2...

Oracle Linux 6 : java-1.7.0-openjdk (ELSA-2018-3409)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-3409 advisory. 1:1.7.0.201-2.6.16.0.0.1 - Update DISTRONAME in specfile 1:1.7.0.201-2.6.16.0 - Bump to 2.6.16 and u201b00. - Update 8076221/PR2809 disable RC4 to appl...

TIBCO Security Advisory: November 6, 2018 - TIBCOActiveSpaces

TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: CVE-2018-12411 Source: TIBCOSoftware Inc. TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks Original release date: November 6, 2018 Last revised: Source: TIB...

[SECURITY] Fedora 29 Update: python26-2.6.9-17.fc29

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

Ubuntu: Security Advisory (USN-3547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for firefox CESA-2018:3006 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2018-4261)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2018-4261 advisory. - x86/speculation: Protect against userspace-userspace spectreRSB Jiri Kosina Orabug: 28631590 CVE-2018-15572 - x86/spectrev2: Remove remaining...

[SECURITY] Fedora 28 Update: python26-2.6.9-17.fc28

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

[SECURITY] Fedora 27 Update: python26-2.6.9-17.fc27

Python 2.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 2.6, see other distributions that support it, such as CentOS or RHEL 6...

RHEL 6 : java-1.6.0-sun (RHSA-2018:3008)

An update for java-1.6.0-sun is now available for Oracle Java for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...