[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1462702
Jason Shepherd <jshepherd(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |bgeorges(a)redhat.com,
| |cmoulliard(a)redhat.com,
| |jpallich(a)redhat.com,
| |lthon(a)redhat.com,
| |mszynkie(a)redhat.com,
| |pgallagh(a)redhat.com,
| |rruss(a)redhat.com,
| |trogers(a)redhat.com
Whiteboard|impact=important,public=201 |impact=important,public=201
|70714,reported=20170616,sou |70714,reported=20170616,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,cwe=CWE-20, |S:U/C:H/I:H/A:H,cwe=CWE-20,
|amq-6/jackson-databind=affe |amq-6/jackson-databind=affe
|cted,jdg-7/jackson-databind |cted,jdg-7/jackson-databind
|=new,jdv-6/jackson-databind |=new,jdv-6/jackson-databind
|=affected,eap-7/jackson-dat |=affected,eap-7/jackson-dat
|abind=affected,bpms-6/jacks |abind=affected,bpms-6/jacks
|on-databind=affected,brms-6 |on-databind=affected,brms-6
|/jackson-databind=affected, |/jackson-databind=affected,
|fuse-6/jackson-databind=aff |fuse-6/jackson-databind=aff
|ected,openshift-enterprise- |ected,openshift-enterprise-
|2/jackson-databind=wontfix, |2/jackson-databind=wontfix,
|rhn_satellite_6/jackson-dat |rhn_satellite_6/jackson-dat
|abind=affected,rhmap-4/jack |abind=affected,rhmap-4/jack
|son-databind=notaffected,sa |son-databind=notaffected,sa
|m-1/jackson-databind=wontfi |m-1/jackson-databind=wontfi
|x,rhev-m-3/jasperreports-se |x,rhev-m-3/jasperreports-se
|rver-pro=wontfix,rhev-m-4/e |rver-pro=wontfix,rhev-m-4/e
|ap7-jackson-databind=affect |ap7-jackson-databind=affect
|ed,rhscl-2/rh-eclipse46-jac |ed,rhscl-2/rh-eclipse46-jac
|kson-databind=affected,fedo |kson-databind=affected,fedo
|ra-all/jackson-databind=aff |ra-all/jackson-databind=aff
|ected,jon-3/Core |ected,jon-3/Core
|Server=notaffected,eap-6/ja |Server=notaffected,eap-6/ja
|ckson-databind=affected,dts |ckson-databind=affected,dts
|-4/devtoolset-4-jackson-dat |-4/devtoolset-4-jackson-dat
|abind=affected,rhscl-3/rh-m |abind=affected,rhscl-3/rh-m
|aven35-jackson-databind=aff |aven35-jackson-databind=aff
|ected |ected,vertx-3/jackson-datab
| |ind=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 4 months
[Bug 1523248] New: tomcat systemd does not cope with - in service names.
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1523248
Bug ID: 1523248
Summary: tomcat systemd does not cope with - in service names.
Product: Fedora
Version: rawhide
Component: tomcat
Severity: low
Assignee: ivan.afonichev(a)gmail.com
Reporter: csutherl(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, csutherl(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
joe.madden(a)mottmac.com, krzysztof.daniel(a)gmail.com,
me(a)coolsvap.net, systemd-maint-list(a)redhat.com,
tomcat-qe(a)redhat.com
Depends On: 1523112
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1523112
[Bug 1523112] tomcat systemd does not cope with - in service names.
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 4 months
[Bug 1455267] New: lucene: Enable more modules in jp_minimal module
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1455267
Bug ID: 1455267
Summary: lucene: Enable more modules in jp_minimal module
Product: Fedora
Version: rawhide
Component: lucene
Keywords: FutureFeature
Assignee: msimacek(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
mat.booth(a)redhat.com, msimacek(a)redhat.com,
rgrunber(a)redhat.com
Eclipse Oxygen requires more lucene modules.
At least these (possibly more):
nothing provides lucene-misc >= 6.1.0 needed by
eclipse-platform-1:4.7.0-0.12.fc27.x86_64
nothing provides lucene-grouping needed by
eclipse-m2e-core-1.7.1-0.3.git3aeac6a.fc26.noarch
Please enable them in jp_minimal profile in the spec file.
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 4 months
[Bug 1506612] CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-7525)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1506612
Tomas Hoger <thoger(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|71102,reported=20171009,sou |71102,reported=20171009,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,cwe=CWE-184 |S:U/C:H/I:H/A:H,cwe=CWE-184
|,fedora-all/jackson-databin |,fedora-all/jackson-databin
|d=affected,amq-6/jackson-da |d=affected,amq-6/jackson-da
|tabind=notaffected,jdg-7/ja |tabind=notaffected,jdg-7/ja
|ckson-databind=notaffected, |ckson-databind=notaffected,
|jdv-6/jackson-databind=nota |jdv-6/jackson-databind=nota
|ffected,eap-7/jackson-datab |ffected,eap-7/jackson-datab
|ind=affected,bpms-6/jackson |ind=affected,bpms-6/jackson
|-databind=notaffected,brms- |-databind=notaffected,brms-
|6/jackson-databind=notaffec |6/jackson-databind=notaffec
|ted,fuse-6/jackson-databind |ted,fuse-6/jackson-databind
|=notaffected,openshift-ente |=notaffected,openshift-ente
|rprise-2/jackson-databind=n |rprise-2/jackson-databind=n
|otaffected,rhn_satellite_6/ |otaffected,rhn_satellite_6/
|jackson-databind=affected,r |jackson-databind=affected,r
|hmap-4/jackson-databind=not |hmap-4/jackson-databind=not
|affected,sam-1/jackson-data |affected,sam-1/jackson-data
|bind=wontfix,rhev-m-3/jaspe |bind=wontfix,rhev-m-3/jaspe
|rreports-server-pro=wontfix |rreports-server-pro=wontfix
|/impact=moderate,rhev-m-4/e |/impact=moderate,rhev-m-4/e
|ap7-jackson-databind=affect |ap7-jackson-databind=affect
|ed/impact=moderate,rhscl-3/ |ed/impact=moderate,rhscl-3/
|rh-eclipse46-jackson-databi |rh-eclipse46-jackson-databi
|nd=affected,jon-3/Core |nd=affected,jon-3/Core
|Server=notaffected,eap-6/ja |Server=notaffected,eap-6/ja
|ckson-databind=affected,dts |ckson-databind=affected,dts
|-4/devtoolset-4-jackson-dat |-4/devtoolset-4-jackson-dat
|abind=affected,rhscl-3/rh-m |abind=wontfix,rhscl-3/rh-ma
|aven35-jackson-databind=aff |ven35-jackson-databind=affe
|ected |cted
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 4 months