Skip to content
OpenAdvisories
Unscored RHBA-2007:0331 2 CVEs

Red Hat Bug Fix Advisory: conga bug fix update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga 0:0.9.2-6.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 conga-debuginfo 0:0.9.2-6.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 luci 0:0.9.2-6.el5
Red Hat · Rhel Cluster 5 rhel_cluster:5 ricci 0:0.9.2-6.el5

Vulnerabilities 2

  • Unscored —
    CVE-2007-0240

    Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-1462

    The luci server component in conga preserves the password between page loads for the Add System/Cluster task flow by st…

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=228637
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=233326
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236025
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236027
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236048
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236050
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236054
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=236055
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhba-2007_0331.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0240
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618268
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0240
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0240
  • report
    https://access.redhat.com/security/cve/CVE-2007-1462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618300
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-1462
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-1462