[Bug 1656906] New: jenkins: forced migration of user records ( SECURITY-1072)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656906
Bug ID: 1656906
Summary: jenkins: forced migration of user records
(SECURITY-1072)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: ahardin(a)redhat.com, aos-bugs(a)redhat.com,
bleanhar(a)redhat.com, bparees(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, wzheng(a)redhat.com
The fix for SECURITY-499 introduced a mechanism that renamed user directories
on disk as a user with an unsafe user name (user ID) is loaded. Insufficient
input validation allowed attackers to rename such user directories even for
users with a safe user name by submitting a crafted user name when attempting
to log in, even with an invalid password. Doing so prevented users from logging
in successfully afterwards.
References:
https://jenkins.io/security/advisory/2018-12-05/
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656948] New: jenkins: potential denial of service through cron expression form validation ( SECURITY-1193)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656948
Bug ID: 1656948
Summary: jenkins: potential denial of service through cron
expression form validation (SECURITY-1193)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: ahardin(a)redhat.com, aos-bugs(a)redhat.com,
bleanhar(a)redhat.com, bparees(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, wzheng(a)redhat.com
A flaw was found in Jenkins. The form validation for cron expressions (e.g.
"Poll SCM", "Build periodically") could enter infinite loops when cron
expressions only matching certain rare dates were entered, blocking request
handling threads indefinitely.
References:
https://jenkins.io/security/advisory/2018-12-05/
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656945] New: jenkins: workspace browser allowed accessing files outside the workspace ( SECURITY-904)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656945
Bug ID: 1656945
Summary: jenkins: workspace browser allowed accessing files
outside the workspace (SECURITY-904)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: lpardo(a)redhat.com
CC: ahardin(a)redhat.com, aos-bugs(a)redhat.com,
bleanhar(a)redhat.com, bparees(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, wzheng(a)redhat.com
A flaw was found in Jenkins. The file browser for workspaces, archived
artifacts, and $JENKINS_HOME/userContent/ followed symbolic links to locations
outside the directory being browsed.
References:
https://jenkins.io/security/advisory/2018-12-05/
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656949] New: jenkins: potential denial of service through cron expression form validation ( SECURITY-1193) [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656949
Bug ID: 1656949
Summary: jenkins: potential denial of service through cron
expression form validation (SECURITY-1193)
[fedora-all]
Product: Fedora
Version: 29
Component: jenkins
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: msrb(a)redhat.com
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656946] New: jenkins: workspace browser allowed accessing files outside the workspace ( SECURITY-904) [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656946
Bug ID: 1656946
Summary: jenkins: workspace browser allowed accessing files
outside the workspace (SECURITY-904) [fedora-all]
Product: Fedora
Version: 29
Component: jenkins
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: msrb(a)redhat.com
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656907] New: jenkins: forced migration of user records ( SECURITY-1072) [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656907
Bug ID: 1656907
Summary: jenkins: forced migration of user records
(SECURITY-1072) [fedora-all]
Product: Fedora
Version: 29
Component: jenkins
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: msrb(a)redhat.com
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656211] New: CVE-2018-19755 nasm: out-of-bounds array access in is_mmacro in asm/preproc.c [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656211
Bug ID: 1656211
Summary: CVE-2018-19755 nasm: out-of-bounds array access in
is_mmacro in asm/preproc.c [fedora-all]
Product: Fedora
Version: 29
Component: nasm
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: mizdebsk(a)redhat.com
Reporter: lpardo(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1656227] New: Documentation needed for files in /etc/java/security/ security.d
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1656227
Bug ID: 1656227
Summary: Documentation needed for files in
/etc/java/security/security.d
Product: Fedora
Version: rawhide
Component: javapackages-tools
Assignee: mizdebsk(a)redhat.com
Reporter: shihping.chan(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ctubbsii(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)redhat.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, sochotni(a)redhat.com
Description of problem:
The format and purpose of files in /etc/java/security/security.d is not
documented
Version-Release number of selected component (if applicable):
javapackages-tools-5.3.0-1.fc29.noarch
How reproducible:
Always
Steps to Reproduce:
1. Install javapackages-tools
2. Install javapackages-filesystems
3. Install bouncycastle
Actual results:
1. New directory /etc/java/security/security.d (from javapackages-*)
2. New empty files:
/etc/java/security/security.d/2000-org.bouncycastle.jce.provider.BouncyCastleProvider
Expected results:
Some explanation as to the purpose of this file and the supposed contents.
Additional info:
Is this some artifact of the defunct gcj? What this ever done?
https://lists.fedoraproject.org/archives/list/java-devel@lists.fedoraproj...
"Longer term, my plan is to support security.d in IcedTea/OpenJDK. External
security providers would drop config files in /etc/java/security/security.d and
JREs that support security.d would automatically load them, in addition to the
providers listed in java.security. In the short term -- that is, soon after
Fedora 8 is released -- I'll inline rebuild-security-providers in relevant post
scripts, and release a new jpackage-utils that doesn't contain the script.
While solution 3) will silence rpm's complaints, it won't solve the fact that
vanilla jpackage-utils doesn't own /etc/java/security/security.d/. So JPackage
users will have to pay attention that applications that run on GCJ and employ
external security providers are not adversely affected."
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months