[Bug 1069911] CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1069911
Arun Babu Neelicattu <aneelica(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20140225, |impact=low,public=20140225,
|reported=20140225,source=in |reported=20140225,source=in
|ternet,cvss2=1.2/AV:L/AC:H/ |ternet,cvss2=1.2/AV:L/AC:H/
|Au:N/C:P/I:N/A:N,bpms-6/jbo |Au:N/C:P/I:N/A:N,bpms-6/jbo
|ssweb=notaffected,brms-6/jb |ssweb=notaffected,brms-6/jb
|ossweb=notaffected,dts-2.0/ |ossweb=notaffected,dts-2.0/
|devtoolset-2-tomcat=notaffe |devtoolset-2-tomcat=notaffe
|cted,eap-6/jbossweb=notaffe |cted,eap-6/jbossweb=notaffe
|cted,eap-5/jbossweb=notaffe |cted,eap-5/jbossweb=notaffe
|cted,fedora-all/tomcat=affe |cted,fedora-all/tomcat=affe
|cted,fsw-6/jbossweb=notaffe |cted,fsw-6/jbossweb=notaffe
|cted,jbews-1/tomcat5=wontfi |cted,jbews-1/tomcat5=wontfi
|x,jbews-1/tomcat6=wontfix,j |x,jbews-1/tomcat6=wontfix,j
|bews-2/tomcat6=affected,jbe |bews-2/tomcat6=affected,jbe
|ws-2/tomcat7=affected,jboss |ws-2/tomcat7=affected,jboss
|/jbossweb=notaffected,jdg-6 |/jbossweb=notaffected,jdg-6
|/jbossweb=notaffected,jdv-6 |/jbossweb=notaffected,jdv-6
|/jbossweb=notaffected,jon-3 |/jbossweb=notaffected,jon-3
|/jbossweb=notaffected,jpp-6 |/jbossweb=notaffected,jpp-6
|/jbossweb=notaffected,opens |/jbossweb=notaffected,opens
|hift-1/tomcat7=affected,rhe |hift-1/tomcat7=affected,rhe
|l-5/tomcat5=affected,rhel-6 |l-5/tomcat5=wontfix,rhel-6/
|/tomcat6=affected,rhel-7/to |tomcat6=affected,rhel-7/tom
|mcat=affected |cat=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=cZqPbCXVJs&a=cc_unsubscribe
9 years, 11 months
[javapackages/big-refactoring] [artifact] Implement update_from() and compare_to()
by Michal Srb
commit 9f1833e1751f8a27c3fe735b277cadf8874c57e9
Author: Michal Srb <msrb(a)redhat.com>
Date: Thu Jun 5 14:22:19 2014 +0200
[artifact] Implement update_from() and compare_to()
python/javapackages/maven/artifact.py | 23 +++++++++++++++++++++++
1 files changed, 23 insertions(+), 0 deletions(-)
---
diff --git a/python/javapackages/maven/artifact.py b/python/javapackages/maven/artifact.py
index 88be309..de6fd9f 100644
--- a/python/javapackages/maven/artifact.py
+++ b/python/javapackages/maven/artifact.py
@@ -138,6 +138,29 @@ class AbstractArtifact(object):
setattr(self, member, getattr(artifact, member))
return True
+ def update_from(self, artifact):
+ if self.compare_to(artifact):
+ for member in self.__dict__:
+ if not member.startswith('_') and not getattr(self, member):
+ setattr(self, member, getattr(artifact, member))
+ return True
+ return False
+
+ def compare_to(self, artifact):
+ if type(self) != type(artifact):
+ return False
+ this = self.__get_significant_members()
+ other = artifact.__get_significant_members()
+ try:
+ del this['version']
+ del other['version']
+ except KeyError:
+ pass
+
+ if this == other:
+ return True
+ return False
+
def __unicode__(self):
return unicode(self.get_mvn_str())
9 years, 11 months
[javapackages/big-refactoring] [artifact] First attempt to implement merging of artifacts
by Michal Srb
commit 3df0ca624eac3b8975a5716fc2d72eda325f460e
Author: Michal Srb <msrb(a)redhat.com>
Date: Thu Jun 5 13:32:40 2014 +0200
[artifact] First attempt to implement merging of artifacts
python/javapackages/maven/artifact.py | 11 +++++++++++
1 files changed, 11 insertions(+), 0 deletions(-)
---
diff --git a/python/javapackages/maven/artifact.py b/python/javapackages/maven/artifact.py
index c8ce77d..88be309 100644
--- a/python/javapackages/maven/artifact.py
+++ b/python/javapackages/maven/artifact.py
@@ -127,6 +127,17 @@ class AbstractArtifact(object):
classifier or m['classifier'],
version or m['version'])
+ def merge_with(self, artifact):
+ if type(self) != type(artifact):
+ raise Exception("Unable to merge artifacts of different types. "
+ "{this} cannot be merged with {other}"
+ .format(this=type(self), other=type(artifact)))
+
+ for member in self.__dict__:
+ if not member.startswith('_') and not getattr(self, member):
+ setattr(self, member, getattr(artifact, member))
+ return True
+
def __unicode__(self):
return unicode(self.get_mvn_str())
9 years, 11 months