[Bug 1102678] New: CVE-2014-0075 tomcat: Limited DoS in chunked transfer encoding input filter [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1102678
Bug ID: 1102678
Summary: CVE-2014-0075 tomcat: Limited DoS in chunked transfer
encoding input filter [fedora-all]
Product: Fedora
Version: 20
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: djorm(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Blocks: 1072776 (CVE-2014-0075)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1072776
[Bug 1072776] CVE-2014-0075 tomcat: Limited DoS in chunked transfer
encoding input filter
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=FxNPBuSSS1&a=cc_unsubscribe
9 years, 2 months
[Bug 1102210] New: CVE-2014-0099 Apache Tomcat: Request smuggling via malicious content length header [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1102210
Bug ID: 1102210
Summary: CVE-2014-0099 Apache Tomcat: Request smuggling via
malicious content length header [fedora-all]
Product: Fedora
Version: 20
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: aneelica(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Blocks: 1102030 (CVE-2014-0099)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1102030
[Bug 1102030] CVE-2014-0099 Apache Tomcat: Request smuggling via malicious
content length header
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=U6i2Sggdjh&a=cc_unsubscribe
9 years, 2 months
[Bug 1009597] New: after installation ntp package is not installed but Date time settings allow to turn network time ON
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1009597
Bug ID: 1009597
Summary: after installation ntp package is not installed but
Date time settings allow to turn network time ON
Product: Fedora
Version: 19
Component: sezpoz
Assignee: msrb(a)redhat.com
Reporter: lra(a)r73.info
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com,
sochotni(a)redhat.com
Description of problem:
After clean install NTP package is not installed. When the user tries to set
network time in GUI Date&Time settings, the switch can be turned on but
silently returns back to off some time later.
Version-Release number of selected component (if applicable):
19
How reproducible:
Steps to Reproduce:
1.Install Fedora 19 in default config
2.Go to Date & Time settings
3.Unlock the dialog
4.Click Network time switch to turn it on
5.Wait some time - it turns off without any warning/notice to user.
Actual results:
The Network time switch silently turns off some time after attempt to trun it
on was done
Expected results:
The Network time switch sould be disabled when there is no ntp package or
package installation shuould be started.
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Xl9iwMbWNA&a=cc_unsubscribe
9 years, 2 months