Skip to content
OpenAdvisories
Unscored RHSA-2012:1278 11 CVEs

Red Hat Security Advisory: Red Hat Enterprise MRG Grid 2.2 security update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 19

ReleasePackageFixed in
Red Hat · MRG 2 enterprise_mrg:2::el5 condor 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-aviary 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-classads 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-debuginfo 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-kbdd 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-qmf 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-vm-gahp 0:7.6.5-0.22.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-wallaby 0:4.1.3-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-wallaby-base-db 0:1.23-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-wallaby-client 0:4.1.3-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 condor-wallaby-tools 0:4.1.3-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 cumin 0:0.1.5444-3.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-wallaby 0:0.12.5-10.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 python-wallabyclient 0:4.1.3-1.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 ruby-wallaby 0:0.12.5-10.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 sesame 0:1.0-4.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 sesame-debuginfo 0:1.0-4.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 wallaby 0:0.12.5-10.el5
Red Hat · MRG 2 enterprise_mrg:2::el5 wallaby-utils 0:0.12.5-10.el5

Vulnerabilities 11

  • Unscored —
    CVE-2012-2680

    Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, does not properly restric…

  • Unscored —
    CVE-2012-2681

    Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, uses predictable random n…

  • Unscored —
    CVE-2012-2683

    Multiple cross-site scripting (XSS) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, …

  • Unscored —
    CVE-2012-2684

    Multiple SQL injection vulnerabilities in the get_sample_filters_by_signature function in Cumin before 0.1.5444, as use…

  • Unscored —
    CVE-2012-2685

    Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticat…

  • Unscored —
    CVE-2012-2734

    Multiple cross-site request forgery (CSRF) vulnerabilities in Cumin before 0.1.5444, as used in Red Hat Enterprise Mess…

  • Unscored —
    CVE-2012-2735

    Session fixation vulnerability in Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (M…

  • Unscored —
    CVE-2012-3459

    Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticat…

  • Unscored —
    CVE-2012-3491

    src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permis…

    condor Debian
  • Unscored —
    CVE-2012-3492

    The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses …

    condor Debian
  • Unscored —
    CVE-2012-3493

    The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 …

    condor Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/sec-Red_Hat_Enterprise_Linux_5.html#RHSA-2012-1278
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=721110
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=748507
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=769573
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=794660
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=799838
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=806071
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=806079
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=807738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=810519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=812126
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=827558
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=829421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=830243
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=830245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=830248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=832124
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=832151
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=846501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=848212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=848214
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=848218
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=848222
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=852321
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1278.json
  • report
    https://access.redhat.com/security/cve/CVE-2012-2680
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2680
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2680
  • report
    https://access.redhat.com/security/cve/CVE-2012-2681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2681
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2681
  • report
    https://access.redhat.com/security/cve/CVE-2012-2683
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2683
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2683
  • report
    https://access.redhat.com/security/cve/CVE-2012-2684
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2012-2684
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2012-2684
  • report
    https://access.redhat.com/security/cve/CVE-2012-2685