Debian DSA-4339-1 : ceph - security update

Multiple vulnerabilities were discovered in Ceph, a distributed storage and file system: The cephx authentication protocol was suspectible to replay attacks and calculated signatures incorrectly, 'ceph mon' did not validate capabilities for pool operations resulting in potential corruption or...

[SECURITY] [DSA 4339-1] ceph security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4339-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 13, 2018 https://www.debian.org/security/faq -...

X (Formerly Twitter): Global defaming of any twitter user

Private tweets can be used to keep any user's tweet secret from rest of twitter world. Once the user changes his setting from private tweets to public tweets, all his secret tweets become visible. This can become a major issue causing global distributed attacks Steps to Reproduce 1. Assume the...

Important: Red Hat Security Advisory: git security update

An update for git is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2018-1567)

Summary IBM WebSphere Application Server is shipped as a component of IBM Security Key Lifecycle Manager SKLM. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulleti...

com.orientechnologies:orientdb-community (2.1.0), com.orientechnologies:orientdb-distributed (2.1.0) +4 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (2.1.0)

com.orientechnologies:orientdb-server MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 2.1.0 -...

com.orientechnologies:orientdb-community (1.6.5), com.orientechnologies:orientdb-distributed (1.6.5) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.5)

com.orientechnologies:orientdb-server MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.6.5 -...

com.orientechnologies:orientdb-distributed (1.6.2), com.orientechnologies:orientdb-graphdb (1.6.2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6.2)

com.orientechnologies:orientdb-server MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6.2 -...

com.orientechnologies:orientdb-community (1.7.3), com.orientechnologies:orientdb-distributed (1.7.3) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.3)

com.orientechnologies:orientdb-server MAVEN version 1.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.3 -...

com.orientechnologies:orientdb-community (1.7.2), com.orientechnologies:orientdb-distributed (1.7.2) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.2)

com.orientechnologies:orientdb-server MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.2 -...

com.orientechnologies:orientdb-community (1.7.9), com.orientechnologies:orientdb-distributed (1.7.9) +3 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.9)

com.orientechnologies:orientdb-server MAVEN version 1.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.9 -...

com.orientechnologies:orientdb-community (1.7.6), com.orientechnologies:orientdb-distributed (1.7.6) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.6)

com.orientechnologies:orientdb-server MAVEN version 1.7.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.6 -...

com.orientechnologies:orientdb-distributed (1.7-rc1), com.orientechnologies:orientdb-graphdb (1.7-rc1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc1)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc1 -...

com.orientechnologies:orientdb (1.4.0), com.orientechnologies:orientdb-distributed (1.4.0) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.0)

com.orientechnologies:orientdb-server MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.0 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb (1.1.0), com.orientechnologies:orientdb-distributed (1.1.0) +2 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.1.0)

com.orientechnologies:orientdb-server MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.1.0 - com.orientechnologies:orientdb-distributed 1.1...

com.orientechnologies:orientdb-distributed (1.7-rc2), com.orientechnologies:orientdb-graphdb (1.7-rc2) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7-rc2)

com.orientechnologies:orientdb-server MAVEN version 1.7-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.7-rc2 -...

com.orientechnologies:orientdb-distributed (1.6), com.orientechnologies:orientdb-graphdb (1.6) +1 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.6)

com.orientechnologies:orientdb-server MAVEN version 1.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-distributed 1.6 - com.orientechnologies:orientdb-graphdb...

com.orientechnologies:orientdb-community (1.7.8), com.orientechnologies:orientdb-distributed (1.7.8) +3 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.7.8)

com.orientechnologies:orientdb-server MAVEN version 1.7.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb-community 1.7.8 -...

com.orientechnologies:orientdb (1.4.1), com.orientechnologies:orientdb-distributed (1.4.1) potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (1.4.1)

com.orientechnologies:orientdb-server MAVEN version 1.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.orientechnologies:orientdb-server and may be impacted: - com.orientechnologies:orientdb 1.4.1 - com.orientechnologies:orientdb-distributed 1.4...

com.orientechnologies:orientdb-community (>=2.0.2, <=2.0.14), com.orientechnologies:orientdb-distributed (>=2.0-m1, <=2.0.14) +20 more potentially affected by CVE-2015-2913 via com.orientechnologies:orientdb-server (>=2.0-m1, <=2.0.14)

com.orientechnologies:orientdb-server MAVEN version =2.0-m1, =2.0.2, =2.0-m1, =2.0-m3, =2.0-m1, =2.0-m3, =2.0-m1, =2.0.14 - io.cobweb:cobweb 1.0 - org.ops4j.orient.samples:orient-sample1 0.3.0 - org.ops4j.orient.samples:orient-sample2 0.3.0 - org.ops4j.orient:orient-ra 0.3.0 -...