[Bug 1317516] New: CVE-2016-0782 activemq: Cross-site scripting vulnerabilities in web console
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1317516
Bug ID: 1317516
Summary: CVE-2016-0782 activemq: Cross-site scripting
vulnerabilities in web console
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: abhgupta(a)redhat.com, agrimm(a)redhat.com,
aileenc(a)redhat.com, ccoleman(a)redhat.com,
chazlett(a)redhat.com, dmcphers(a)redhat.com,
gvarsami(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jialiu(a)redhat.com,
joelsmith(a)redhat.com, jokerman(a)redhat.com,
kconner(a)redhat.com, kseifried(a)redhat.com,
ldimaggi(a)redhat.com, lmeyer(a)redhat.com,
mmccomas(a)redhat.com, nwallace(a)redhat.com,
pavelp(a)redhat.com, puntogil(a)libero.it,
rwagner(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com, s(a)shk.io,
tcunning(a)redhat.com, tdawson(a)redhat.com,
tiwillia(a)redhat.com, tkirby(a)redhat.com
Several instances of cross-site scripting vulnerabilities were identified to be
present in the web based administration console as well as the ability to
trigger a Java memory dump into an arbitrary folder. The root cause of these
issues are improper user data output validation and incorrect permissions
configured on Jolokia.
Affected versions: ActiveMQ 5.0.0 - 5.13.1
External Reference:
http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announc...
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 9 months
[Bug 1344679] New: xmvn tries to install nonexistent pom of pomless artifact
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1344679
Bug ID: 1344679
Summary: xmvn tries to install nonexistent pom of pomless
artifact
Product: Fedora
Version: rawhide
Component: xmvn
Assignee: mizdebsk(a)redhat.com
Reporter: msimacek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)redhat.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com
Description of problem:
xmvn cannot install artifacts that use tycho-pomless, because it tries to
install polyglot's dummy placeholder.
[ERROR] Artifact installation failed
org.fedoraproject.xmvn.tools.install.ArtifactInstallationException: Artifact
path points to a non-existent file:
/builddir/build/BUILD/eclipse-abrt-0.0.3/org.fedoraproject.abrt/.polyglot.build.properties
at
org.fedoraproject.xmvn.tools.install.impl.InstallationPlan.validate(InstallationPlan.java:97)
at
org.fedoraproject.xmvn.tools.install.impl.InstallationPlan.<init>(InstallationPlan.java:56)
at
org.fedoraproject.xmvn.tools.install.impl.DefaultInstaller.install(DefaultInstaller.java:298)
at
org.fedoraproject.xmvn.tools.install.cli.InstallerCli.run(InstallerCli.java:65)
at
org.fedoraproject.xmvn.tools.install.cli.InstallerCli.main(InstallerCli.java:86)
Version-Release number of selected component (if applicable):
xmvn-2.5.0-8.fc25.noarch
How reproducible:
always
Steps to Reproduce:
1. rebuild eclipse-abrt (from git)
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 9 months