[Bug 1205622] New: CVE-2015-1807 jenkins: directory traversal from artifacts via symlink (SECURITY-162)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205622
Bug ID: 1205622
Summary: CVE-2015-1807 jenkins: directory traversal from
artifacts via symlink (SECURITY-162)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
This vulnerability allows users with the job configuration privilege or users
with commit access to the build script to access arbitrary files/directories on
the master, resulting in the exposure of sensitive information, such as
encryption keys.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vs9xNW7rJ9&a=cc_unsubscribe
8 years, 2 months
[Bug 1205620] New: CVE-2015-1806 jenkins: Combination filter Groovy script unsecured (SECURITY-125)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205620
Bug ID: 1205620
Summary: CVE-2015-1806 jenkins: Combination filter Groovy
script unsecured (SECURITY-125)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
This vulnerability allows users with the job configuration privilege to
escalate his privileges, resulting in arbitrary code execution to the master.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=G0xWdXgoFw&a=cc_unsubscribe
8 years, 2 months
[Bug 1205616] New: CVE-2015-1814 jenkins: forced API token change (SECURITY-180)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205616
Bug ID: 1205616
Summary: CVE-2015-1814 jenkins: forced API token change
(SECURITY-180)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
The part of Jenkins that issues a new API token was not adequately protected
against anonymous attackers. This allows an attacker to escalate privileges on
Jenkins
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mpKhqf4MCU&a=cc_unsubscribe
8 years, 2 months
[Bug 1205615] New: CVE-2015-1812 CVE-2015-1813 jenkins: Reflective XSS vulnerability (SECURITY-171, SECURITY-177)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205615
Bug ID: 1205615
Summary: CVE-2015-1812 CVE-2015-1813 jenkins: Reflective XSS
vulnerability (SECURITY-171, SECURITY-177)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
An attacker without any access to Jenkins can navigate the user to a carefully
crafted URL and have the user execute unintended actions. This vulnerability
can be used to attack Jenkins inside firewalls from outside so long as the
location of Jenkins is known to the attacker.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=aUngdTWJZ8&a=cc_unsubscribe
8 years, 2 months
[Bug 1127276] New: CVE-2014-5075 smack: MitM vulnerability
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1127276
Bug ID: 1127276
Summary: CVE-2014-5075 smack: MitM vulnerability
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: brms-jira(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
pavelp(a)redhat.com, puntogil(a)libero.it,
tkirby(a)redhat.com, weli(a)redhat.com
It was reported [1] that Smack (XMPP client library) is vulnerable to MitM
attacks with a crafted SSL certificates.
Quote from [1]:
...
Details
-------
Smack is using Java's `SSLSocket`, which checks the peer certificate
using an `X509TrustManager`, but does not perform hostname verification.
Therefore, it is possible to redirect the traffic between a Smack-using
application and a legitimate XMPP server through the attacker's server,
merely by providing a valid certificate for a domain under the
attacker's control.
In Smack versions 2.2.0 to 3.4.1, a custom `ServerTrustManager`
implementation was used, which was supplied with the connection's server
name, and performed hostname verification. However, it failed to verify
the basicConstraints and nameConstraints of the certificate chain
(CVE-2014-0363, http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0363)
and has been removed in Smack 4.0.0.
Applications using Smack 2.2.0 to 3.4.1 with a custom `TrustManager` did
not benefit from `ServerTrustManager` and are vulnerable as well, unless
their own `TrustManager` implementation explicitly performs hostname
verification.
...
[1]: http://seclists.org/bugtraq/2014/Aug/29
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vQuZmnHNAP&a=cc_unsubscribe
8 years, 3 months
[Bug 1222923] New: CVE-2015-2156 netty: HttpOnly cookie bypass
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1222923
Bug ID: 1222923
Summary: CVE-2015-2156 netty: HttpOnly cookie bypass
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
asantos(a)redhat.com, aszczucz(a)redhat.com,
bdawidow(a)redhat.com, bkearney(a)redhat.com,
brms-jira(a)redhat.com, cbillett(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
cpelland(a)redhat.com, cperry(a)redhat.com,
dandread(a)redhat.com, darran.lofthouse(a)redhat.com,
epp-bugs(a)redhat.com, etirelli(a)redhat.com,
felias(a)redhat.com, fnasser(a)redhat.com,
gvarsami(a)redhat.com, hchiorea(a)redhat.com,
hfnukal(a)redhat.com, huwang(a)redhat.com,
jason.greene(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jboss-set(a)redhat.com,
jbpapp-maint(a)redhat.com, jcoleman(a)redhat.com,
jdg-bugs(a)redhat.com, jerboaa(a)gmail.com,
jolee(a)redhat.com, jon.vanalten(a)redhat.com,
jpallich(a)redhat.com, katello-bugs(a)redhat.com,
kconner(a)redhat.com, kseifried(a)redhat.com,
ldimaggi(a)redhat.com, lgao(a)redhat.com,
lpetrovi(a)redhat.com, mbaluch(a)redhat.com,
mmccune(a)redhat.com, mnovotny(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com,
mweiler(a)redhat.com, mwinkler(a)redhat.com,
myarboro(a)redhat.com, nwallace(a)redhat.com,
ohadlevy(a)redhat.com, pavelp(a)redhat.com,
pgier(a)redhat.com, pslavice(a)redhat.com,
rhq-maint(a)redhat.com, rrajasek(a)redhat.com,
rsvoboda(a)redhat.com, rwagner(a)redhat.com,
rzhang(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com,
spinder(a)redhat.com, tcunning(a)redhat.com,
theute(a)redhat.com, tjay(a)redhat.com, tkirby(a)redhat.com,
tomckay(a)redhat.com, ttarrant(a)redhat.com,
twalsh(a)redhat.com, vhalbert(a)redhat.com,
vtunka(a)redhat.com, weli(a)redhat.com
A flaw was found in the way Netty’s CookieDecoder method validated cookie name
and value characters. An attacker could use this flaw to bypass the httpOnly
flag on sensitive cookies.
Upstream patch:
https://github.com/slandelle/netty/commit/800555417e77029dcf8a31d7de44f27...
External References:
https://www.playframework.com/security/vulnerability/CVE-2015-2156-HttpOn...
http://engineering.linkedin.com/security/look-netty%E2%80%99s-recent-secu...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Vfly1r8bG5&a=cc_unsubscribe
8 years, 3 months
[Bug 1252823] New: Please include plugin script
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1252823
Bug ID: 1252823
Summary: Please include plugin script
Product: Fedora
Version: 22
Component: elasticsearch
Assignee: jvanek(a)redhat.com
Reporter: pahan(a)hubbitus.info
QA Contact: extras-qa(a)fedoraproject.org
CC: bobjensen(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, pbrobinson(a)gmail.com,
zbyszek(a)in.waw.pl
Hello.
In repack.sh you delete "elasticsearch elasticsearch.bat
elasticsearch-service-mgr.exe elasticsearch-service-x64.exe
elasticsearch-service-x86.exe plugin plugin.bat service.bat".
I understand what binaries must be stripped. But what with plugin, which is
just shell script? I assume it is not sane way install such plugions which is
not in rpm form, and it is main reason of excludin, is not? But may we let it
on administrator choose when desired plugin is not packaged?
Could you please include that script in package as it done in upstream rpm?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mqaMrd907k&a=cc_unsubscribe
8 years, 3 months