[Bug 1375941] CVE-2016-5725 jsch: path traversal vulnerability
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1375941
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20160831, |impact=low,public=20160831,
|reported=20160906,source=ma |reported=20160906,source=ma
|geia,cvss2=2.6/AV:N/AC:H/Au |geia,cvss2=2.6/AV:N/AC:H/Au
|:N/C:N/I:P/A:N,cvss3=4.2/CV |:N/C:N/I:P/A:N,cvss3=4.2/CV
|SS:3.0/AV:N/AC:H/PR:H/UI:R/ |SS:3.0/AV:N/AC:H/PR:H/UI:R/
|S:U/C:N/I:H/A:N,cwe=CWE-22, |S:U/C:N/I:H/A:N,cwe=CWE-22,
|fedora-all/jsch=affected/cv |fedora-all/jsch=affected/im
|ss3=5.9/CVSS:3.0/AV:N/AC:H/ |pact=moderate/cvss3=5.9/CVS
|PR:N/UI:N/S:U/C:N/I:H/A:N/i |S:3.0/AV:N/AC:H/PR:N/UI:N/S
|mpact=moderate,bpms-6/jsch= |:U/C:N/I:H/A:N,bpms-6/jsch=
|wontfix/cvss2=2.1/AV:N/AC:H |wontfix/cvss2=2.1/AV:N/AC:H
|/Au:S/C:N/I:P/A:N,brms-6/js |/Au:S/C:N/I:P/A:N,brms-6/js
|ch=wontfix/cvss2=2.1/AV:N/A |ch=wontfix/cvss2=2.1/AV:N/A
|C:H/Au:S/C:N/I:P/A:N,amq-6/ |C:H/Au:S/C:N/I:P/A:N,amq-6/
|jsch=wontfix/cvss2=2.1/AV:N |jsch=wontfix/cvss2=2.1/AV:N
|/AC:H/Au:S/C:N/I:P/A:N,jdv- |/AC:H/Au:S/C:N/I:P/A:N,jdv-
|6/jsch=wontfix/cvss2=2.1/AV |6/jsch=wontfix/cvss2=2.1/AV
|:N/AC:H/Au:S/C:N/I:P/A:N,fs |:N/AC:H/Au:S/C:N/I:P/A:N,fs
|w-6/jsch=wontfix/cvss2=2.1/ |w-6/jsch=wontfix/cvss2=2.1/
|AV:N/AC:H/Au:S/C:N/I:P/A:N, |AV:N/AC:H/Au:S/C:N/I:P/A:N,
|fuse-6/jsch=wontfix/cvss2=2 |fuse-6/jsch=wontfix/cvss2=2
|.1/AV:N/AC:H/Au:S/C:N/I:P/A |.1/AV:N/AC:H/Au:S/C:N/I:P/A
|:N,jon-3/jsch=notaffected/c |:N,jon-3/jsch=notaffected/i
|vss3=5.9/CVSS:3.0/AV:N/AC:H |mpact=moderate/cvss3=5.9/CV
|/PR:N/UI:N/S:U/C:N/I:H/A:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|impact=moderate,openshift-e |S:U/C:N/I:H/A:N,openshift-e
|nterprise-2/jsch=affected/c |nterprise-2/jsch=affected/i
|vss3=5.9/CVSS:3.0/AV:N/AC:H |mpact=moderate/cvss3=5.9/CV
|/PR:N/UI:N/S:U/C:N/I:H/A:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|impact=moderate,rhel-5/jsch |S:U/C:N/I:H/A:N,rhel-5/jsch
|=wontfix/cvss3=5.9/CVSS:3.0 |=wontfix/impact=moderate/cv
|/AV:N/AC:H/PR:N/UI:N/S:U/C: |ss3=5.9/CVSS:3.0/AV:N/AC:H/
|N/I:H/A:N/impact=moderate,r |PR:N/UI:N/S:U/C:N/I:H/A:N,r
|hel-6/jsch=affected/cvss3=5 |hel-6/jsch=affected/impact=
|.9/CVSS:3.0/AV:N/AC:H/PR:N/ |moderate/cvss3=5.9/CVSS:3.0
|UI:N/S:U/C:N/I:H/A:N/impact |/AV:N/AC:H/PR:N/UI:N/S:U/C:
|=moderate,rhel-7/jsch=affec |N/I:H/A:N,rhel-7/jsch=affec
|ted/cvss3=5.9/CVSS:3.0/AV:N |ted/impact=moderate/cvss3=5
|/AC:H/PR:N/UI:N/S:U/C:N/I:H |.9/CVSS:3.0/AV:N/AC:H/PR:N/
|/A:N/impact=moderate,rhn_sa |UI:N/S:U/C:N/I:H/A:N,rhn_sa
|tellite_6/jsch=affected/cvs |tellite_6/jsch=affected/imp
|s3=5.9/CVSS:3.0/AV:N/AC:H/P |act=moderate/cvss3=5.9/CVSS
|R:N/UI:N/S:U/C:N/I:H/A:N/im |:3.0/AV:N/AC:H/PR:N/UI:N/S:
|pact=moderate,rhev-m-4/jsch |U/C:N/I:H/A:N,rhev-m-4/jsch
|=affected/cvss3=5.9/CVSS:3. |=affected/impact=moderate/c
|0/AV:N/AC:H/PR:N/UI:N/S:U/C |vss3=5.9/CVSS:3.0/AV:N/AC:H
|:N/I:H/A:N/impact=moderate, |/PR:N/UI:N/S:U/C:N/I:H/A:N,
|dts-3/jsch=wontfix/cvss3=5. |dts-3/jsch=wontfix/impact=m
|9/CVSS:3.0/AV:N/AC:H/PR:N/U |oderate/cvss3=5.9/CVSS:3.0/
|I:N/S:U/C:N/I:H/A:N/impact= |AV:N/AC:H/PR:N/UI:N/S:U/C:N
|moderate,rhscl-2/rh-java-co |/I:H/A:N,rhscl-3/rh-java-co
|mmon-jsch=affected/cvss3=5. |mmon-jsch=affected/impact=m
|9/CVSS:3.0/AV:N/AC:H/PR:N/U |oderate/cvss3=5.9/CVSS:3.0/
|I:N/S:U/C:N/I:H/A:N/impact= |AV:N/AC:H/PR:N/UI:N/S:U/C:N
|moderate |/I:H/A:N
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 6 months
[Bug 1495241] New: [tomcat] zip -u in spec file causes race condition
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1495241
Bug ID: 1495241
Summary: [tomcat] zip -u in spec file causes race condition
Product: Fedora
Version: rawhide
Component: tomcat
Assignee: ivan.afonichev(a)gmail.com
Reporter: tdawson(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, alee(a)redhat.com,
csutherl(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, me(a)coolsvap.net
Description of problem:
zip -u is being used to update META-INF/MANIFEST.MF in jar files
zip -u will "Update existing entries if newer on the file system"
Unfortunately zip is only looking at the minute that a file is updated. We are
finding on fast test machines that the content of the jar, and the new
META-INF/MANIFEST.MF, are being created in the same minute. Thus when the zip
-u is ran, the MANIFEST.MF isn't updated, zip returns a non 0 error code, and
the build fails.
"zip -u" should be changed to "zip", which changes the zip command from
"update" to "add"
zip (add) will "Update existing entries and add new files. ... This is the
default mode."
If you can change your spec files to use just "zip" instead of "zip -u", that
will solve this race condition
Version-Release number of selected component (if applicable):
tomcat-8.0.46-1.fc28
How reproducible:
5-95% - depending on the speed of the machine.
Steps to Reproduce:
1. koji build
2.
3.
Actual results:
+ zip -u build/lib/<jar-name>.jar META-INF/MANIFEST.MF
RPM build errors:
error: Bad exit status from /var/tmp/rpm-tmp.oh6WeU (%build)
Bad exit status from /var/tmp/rpm-tmp.oh6WeU (%build)
Child return code was: 1
Expected results:
...
+ zip -u build/lib/<jar-name>.jar META-INF/MANIFEST.MF
updating: META-INF/MANIFEST.MF (deflated 56%)
...
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 6 months
[Bug 1504561] New: CVE-2017-12628 apache-james-project: Java deserialization in the JMX server
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1504561
Bug ID: 1504561
Summary: CVE-2017-12628 apache-james-project: Java
deserialization in the JMX server
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, sochotni(a)redhat.com
The JMX server, also used by the command line client is exposed to a java
de-serialization issue, and thus can be used to execute arbitrary commands. As
James exposes JMX socket by default only on local-host, this vulnerability can
only be used for privilege escalation.
References:
http://seclists.org/oss-sec/2017/q4/109
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 6 months