Red Hat Security Advisory: Red Hat High Performance Computing (HPC) Solution 5.5
🔗 CVE IDs covered (7)
📋 Description
CVE-2009-4032 — cacti: Multiple cross-site scripting flaws CVE-2010-1431 — cacti: SQL injection vulnerability (BONSAI-2010-0104) CVE-2010-1644 — cacti: XSS issues in host.php and data_sources.php (VUPEN/ADV-2010-1203) CVE-2010-1645 — cacti: multiple command injection flaws (BONSAI-2010-0105) CVE-2010-2092 — cacti: graph.php rra_id SQL injection vulnerability (MOPS-2010-023) CVE-2010-2544 — cacti: XSS in utilities.php log file viewer search pattern CVE-2010-2545 — cacti: XSS via various object names or descriptions
🎯 Affected products200
- Red Hat HPC Solution for RHEL 5 Server
- GeoIP-0:1.4.7-0.1.20090931cvs.el5.src as a component of Red Hat HPC Solution for RHEL 5 Server
- GeoIP-0:1.4.7-0.1.20090931cvs.el5.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- GeoIP-debuginfo-0:1.4.7-0.1.20090931cvs.el5.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- GeoIP-devel-0:1.4.7-0.1.20090931cvs.el5.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-mvapich1-gnu-0:20000224-7.src as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-mvapich1-gnu-0:20000224-7.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-mvapich1-gnu-debuginfo-0:20000224-7.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-openmpi-gnu-0:20000224-9.src as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-openmpi-gnu-0:20000224-9.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- blacs-openmpi-gnu-debuginfo-0:20000224-9.x86_64 as a component of Red Hat HPC Solution for RHEL 5 Server
- cacti-0:0.8.7g-1.1.el5.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- cacti-0:0.8.7g-1.1.el5.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-RHEL-OFED-0:5.5-2.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-RHEL-OFED-0:5.5-2.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-RHEL-OFED-devel-0:5.5-1.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-RHEL-OFED-devel-0:5.5-1.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-base-installer-0:5.5-1.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-base-installer-0:5.5-1.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-base-node-0:5.5-1.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-base-node-0:5.5-1.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-cacti-0:0.1-49.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-cacti-0:0.1-49.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-ganglia-agent-v3_0-0:3.0-3.el5.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-ganglia-agent-v3_0-0:3.0-3.el5.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-ganglia-server-v3_0-0:3.0-3.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-ganglia-server-v3_0-0:3.0-3.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-gnome-desktop-0:5.5-1.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- component-gnome-desktop-0:5.5-1.src as a component of Red Hat HPC Solution for RHEL 5 Server
- component-icr-facilitator-0:5.5-1.noarch as a component of Red Hat HPC Solution for RHEL 5 Server
- +170 more not shown
✅ Remediation
Refer to the RHHPC installation guide for information on performing a fresh install of a new RHHPC system, or upgrading from a previous RHHPC system: http://www.redhat.com/docs/en-US/hpc/1.0/html-single/ Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2010:0635
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=459105
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=459229
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=541279
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=585401
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=599419
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=609076
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=609093
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=609115
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0635.json