[Bug 1602975] jetty-9.4.12.RC1 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1602975
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |MODIFIED
--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org> ---
ecj-4.10-1.fc29 eclipse-4.10.0-1.fc29 eclipse-abrt-0.0.3-7.fc29
eclipse-dtp-1.14.102-2.fc29 eclipse-ecf-3.14.4-1.fc29 eclipse-emf-2.16.0-1.fc29
eclipse-epp-logging-2.0.7-5.fc29 eclipse-launchbar-2.2.2-1.fc29
eclipse-linuxtools-7.1.0-1.fc29 eclipse-m2e-core-1.10.0-1.fc29
eclipse-m2e-wtp-1.4.1-1.fc29 eclipse-mpc-1.7.3-1.fc29 eclipse-pdt-6.2.0-1.fc29
eclipse-photran-9.2.1-1.fc29 eclipse-ptp-9.2.1-1.fc29
eclipse-testng-6.14.0-6.fc29 glassfish-jaxb-api-2.2.12-10.fc29
icu4j-63.1-1.fc29 jetty-9.4.14-1.v20181114.fc29 jnr-constants-0.9.12-1.fc29
jnr-enxio-0.19-1.fc29 jnr-ffi-2.1.8-1.fc29 jnr-posix-3.0.47-1.fc29
jnr-unixsocket-0.21-1.fc29 has been submitted as an update to Fedora 29.
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9696a7dd8e
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1578582] CVE-2018-1258 spring-security-core: Unauthorized Access with Spring Security Method Security
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1578582
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |hghasemb(a)redhat.com
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0509,reported=20180511,sour |0509,reported=20180511,sour
|ce=cve,cvss3=5.6/CVSS:3.0/A |ce=cve,cvss3=5.6/CVSS:3.0/A
|V:N/AC:H/PR:N/UI:N/S:U/C:L/ |V:N/AC:H/PR:N/UI:N/S:U/C:L/
|I:L/A:L,cwe=CWE-592,fedora- |I:L/A:L,cwe=CWE-592,fedora-
|all/springframework-securit |all/springframework-securit
|y=affected,fuse-7/spring-se |y=affected,fuse-7/spring-se
|curity-core=affected,fuse-6 |curity-core=notaffected,fus
|/spring-security-core=wontf |e-6/spring-security-core=no
|ix,fis-2/spring-security-co |taffected,fis-2/spring-secu
|re=affected,rhev-m-3/jasper |rity-core=notaffected,rhev-
|reports-server-pro=notaffec |m-3/jasperreports-server-pr
|ted |o=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1602975] jetty-9.4.12.RC1 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1602975
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |MODIFIED
Status|MODIFIED |ON_QA
--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org> ---
ecj-4.10-1.fc29 eclipse-4.10.0-1.fc29 eclipse-abrt-0.0.3-7.fc29
eclipse-ecf-3.14.4-1.fc29 eclipse-emf-2.16.0-1.fc29
eclipse-epp-logging-2.0.7-5.fc29 eclipse-launchbar-2.2.2-1.fc29
eclipse-linuxtools-7.1.0-1.fc29 eclipse-mpc-1.7.3-1.fc29
eclipse-pdt-6.2.0-1.fc29 eclipse-photran-9.2.1-1.fc29 eclipse-ptp-9.2.1-1.fc29
glassfish-jaxb-api-2.2.12-10.fc29 icu4j-63.1-1.fc29
jetty-9.4.14-1.v20181114.fc29 jnr-constants-0.9.12-1.fc29 jnr-enxio-0.19-1.fc29
jnr-ffi-2.1.8-1.fc29 jnr-posix-3.0.47-1.fc29 jnr-unixsocket-0.21-1.fc29 has
been submitted as an update to Fedora 29.
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9696a7dd8e
--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org> ---
ecj-4.10-1.fc29, eclipse-4.10.0-1.fc29, eclipse-abrt-0.0.3-7.fc29,
eclipse-dtp-1.14.102-2.fc29, eclipse-ecf-3.14.4-1.fc29,
eclipse-emf-2.16.0-1.fc29, eclipse-epp-logging-2.0.7-5.fc29,
eclipse-launchbar-2.2.2-1.fc29, eclipse-linuxtools-7.1.0-1.fc29,
eclipse-m2e-core-1.10.0-1.fc29, eclipse-m2e-wtp-1.4.1-1.fc29,
eclipse-mpc-1.7.3-1.fc29, eclipse-pdt-6.2.0-1.fc29,
eclipse-photran-9.2.1-1.fc29, eclipse-ptp-9.2.1-1.fc29,
glassfish-jaxb-api-2.2.12-10.fc29, icu4j-63.1-1.fc29,
jetty-9.4.14-1.v20181114.fc29, jnr-constants-0.9.12-1.fc29,
jnr-enxio-0.19-1.fc29, jnr-ffi-2.1.8-1.fc29, jnr-posix-3.0.47-1.fc29,
jnr-unixsocket-0.21-1.fc29 has been pushed to the Fedora 29 testing repository.
If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-2018-9696a7dd8e
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1540828] CVE-2017-15706 tomcat: Incorrect documentation of CGI Servlet search algorithm may lead to misconfiguration
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1540828
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=low,public=20180131, |impact=low,public=20180131,
|reported=20180201,source=in |reported=20180201,source=in
|ternet,cvss3=0.0/CVSS:3.0/A |ternet,cvss3=0.0/CVSS:3.0/A
|V:N/AC:L/PR:N/UI:N/S:U/C:N/ |V:N/AC:L/PR:N/UI:N/S:U/C:N/
|I:N/A:N,jbews-2/tomcat7=not |I:N/A:N,jbews-2/tomcat7=not
|affected,jws-3/tomcat7=nota |affected,jws-3/tomcat7=nota
|ffected,jws-3/tomcat8=notaf |ffected,jws-3/tomcat8=notaf
|fected,fedora-all/tomcat=af |fected,fedora-all/tomcat=af
|fected,epel-6/tomcat=affect |fected,epel-6/tomcat=affect
|ed,rhel-7/tomcat=notaffecte |ed,rhel-7/tomcat=notaffecte
|d,rhel-8/tomcat=affected,jd |d,rhel-8/tomcat=notaffected
|v-6/jbossweb=notaffected,ea |,jdv-6/jbossweb=notaffected
|p-6/jbossweb=notaffected,fu |,eap-6/jbossweb=notaffected
|se-6/jbossweb=notaffected,r |,fuse-6/jbossweb=notaffecte
|hscl-3/rh-java-common-tomca |d,rhscl-3/rh-java-common-to
|t=notaffected,jpp-6/jbosswe |mcat=notaffected,jpp-6/jbos
|b=notaffected,openshift-1/j |sweb=notaffected,openshift-
|bossweb=wontfix,rhel-6/tomc |1/jbossweb=wontfix,rhel-6/t
|at6=notaffected,jbews-2/tom |omcat6=notaffected,jbews-2/
|cat6=notaffected |tomcat6=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1550671] CVE-2018-1067 undertow: HTTP header injection using CRLF with UTF-8 Encoding (incomplete fix of CVE-2016-4993)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1550671
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0425:1751,reported=20180301 |0425:1751,reported=20180301
|,source=researcher,cvss2=5. |,source=researcher,cvss2=5.
|8/AV:N/AC:M/Au:N/C:P/I:P/A: |8/AV:N/AC:M/Au:N/C:P/I:P/A:
|N,cvss3=5.4/CVSS:3.0/AV:N/A |N,cvss3=5.4/CVSS:3.0/AV:N/A
|C:L/PR:N/UI:R/S:U/C:L/I:L/A |C:L/PR:N/UI:R/S:U/C:L/I:L/A
|:N,cwe=CWE-113,fedora-all/w |:N,cwe=CWE-113,fedora-all/w
|ildfly=affected,eap-6/jboss |ildfly=affected,eap-6/jboss
|web=notaffected,eap-7/under |web=notaffected,eap-7/under
|tow=affected,openshift-1/jb |tow=affected,openshift-1/jb
|ossweb=affected,rhel-6/tomc |ossweb=affected,rhel-6/tomc
|at6=notaffected,rhel-7/tomc |at6=notaffected,rhel-7/tomc
|at=notaffected,jbews-2/tomc |at=notaffected,jbews-2/tomc
|at7=notaffected,jbews-2/tom |at7=notaffected,jbews-2/tom
|cat6=notaffected,eap-7/wild |cat6=notaffected,eap-7/wild
|fly=new,jdg-7/wildfly=new,r |fly=new,jdg-7/wildfly=new,r
|hev-m-4/eap7-wildfly=notaff |hev-m-4/eap7-wildfly=notaff
|ected,rhsso-7/wildfly=new,j |ected,rhsso-7/wildfly=new,j
|dg-6/jbossweb=new,eap-5/jbo |dg-6/jbossweb=new,eap-5/jbo
|ssweb=new,brms-5/jbossweb=w |ssweb=new,brms-5/jbossweb=w
|ontfix,soap-5/jbossweb=wont |ontfix,soap-5/jbossweb=wont
|fix,fsw-6/jbossweb=wontfix, |fix,fsw-6/jbossweb=wontfix,
|fuse-6/jbossweb=wontfix,fed |fuse-6/jbossweb=wontfix,fed
|ora-all/tomcat=affected,epe |ora-all/tomcat=affected,epe
|l-6/tomcat=notaffected,rhel |l-6/tomcat=notaffected,rhel
|-5/tomcat5=notaffected,rhel |-5/tomcat5=notaffected,rhel
|-8/tomcat=notaffected,rhscl |-8/pki-servlet-container=no
|-3/rh-java-common-tomcat=no |taffected,rhscl-3/rh-java-c
|taffected,swarm-7/undertow= |ommon-tomcat=notaffected,sw
|affected,fedora-all/underto |arm-7/undertow=affected,fed
|w=affected,rhev-m-4/eap7-un |ora-all/undertow=affected,r
|dertow=affected |hev-m-4/eap7-undertow=affec
| |ted
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1548289] CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unintended exposure of resources
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548289
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0131,reported=20180223,sour |0131,reported=20180223,sour
|ce=internet,cvss3=6.5/CVSS: |ce=internet,cvss3=6.5/CVSS:
|3.0/AV:N/AC:L/PR:N/UI:N/S:U |3.0/AV:N/AC:L/PR:N/UI:N/S:U
|/C:L/I:L/A:N,cwe=CWE-284,fe |/C:L/I:L/A:N,cwe=CWE-284,fe
|dora-all/tomcat=affected,ep |dora-all/tomcat=affected,ep
|el-all/tomcat=affected,rhel |el-all/tomcat=affected,rhel
|-7/tomcat=affected,rhel-8/t |-7/tomcat=affected,rhel-8/p
|omcat=affected,fuse-6/jboss |ki-servlet-container=affect
|web=notaffected,fuse-6/kara |ed,fuse-6/jbossweb=notaffec
|f=notaffected,jbews-2/tomca |ted,fuse-6/karaf=notaffecte
|t7=wontfix,jws-3/tomcat7=af |d,jbews-2/tomcat7=wontfix,j
|fected,jws-3/tomcat8=affect |ws-3/tomcat7=affected,jws-3
|ed,jon-3/jbossweb=notaffect |/tomcat8=affected,jon-3/jbo
|ed,jpp-6/jbossweb=wontfix,j |ssweb=notaffected,jpp-6/jbo
|dv-6/jbossweb=notaffected,j |ssweb=wontfix,jdv-6/jbosswe
|dg-6/jbossweb=wontfix,eap-6 |b=notaffected,jdg-6/jbosswe
|/jbossweb=affected,openshif |b=wontfix,eap-6/jbossweb=af
|t-1/jbossweb=notaffected,rh |fected,openshift-1/jbossweb
|scl-3/rh-java-common-tomcat |=notaffected,rhscl-3/rh-jav
|=notaffected,rhel-6/tomcat6 |a-common-tomcat=notaffected
|=notaffected,rhel-5/tomcat5 |,rhel-6/tomcat6=notaffected
|=notaffected,jbews-2/tomcat |,rhel-5/tomcat5=notaffected
|6=notaffected,springboot-1/ |,jbews-2/tomcat6=notaffecte
|tomcat=affected,fis-2/tomca |d,springboot-1/tomcat=affec
|t8=affected |ted,fis-2/tomcat8=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1548282] CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548282
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0223,reported=20180223,sour |0223,reported=20180223,sour
|ce=internet,cvss3=4.8/CVSS: |ce=internet,cvss3=4.8/CVSS:
|3.0/AV:N/AC:H/PR:N/UI:N/S:U |3.0/AV:N/AC:H/PR:N/UI:N/S:U
|/C:L/I:L/A:N,cwe=CWE-284,fe |/C:L/I:L/A:N,cwe=CWE-284,fe
|dora-all/tomcat=affected,ep |dora-all/tomcat=affected,ep
|el-all/tomcat=affected,rhel |el-all/tomcat=affected,rhel
|-7/tomcat=affected,rhel-8/t |-7/tomcat=affected,rhel-8/p
|omcat=affected,fuse-6/jboss |ki-servlet-container=affect
|web=notaffected,fuse-6/kara |ed,fuse-6/jbossweb=notaffec
|f=notaffected,jbews-2/tomca |ted,fuse-6/karaf=notaffecte
|t7=wontfix,jws-3/tomcat7=af |d,jbews-2/tomcat7=wontfix,j
|fected,jws-3/tomcat8=affect |ws-3/tomcat7=affected,jws-3
|ed,jon-3/jbossweb=notaffect |/tomcat8=affected,jon-3/jbo
|ed,jpp-6/jbossweb=wontfix,j |ssweb=notaffected,jpp-6/jbo
|dv-6/jbossweb=notaffected,j |ssweb=wontfix,jdv-6/jbosswe
|dg-6/jbossweb=notaffected,e |b=notaffected,jdg-6/jbosswe
|ap-6/jbossweb=notaffected,o |b=notaffected,eap-6/jbosswe
|penshift-1/jbossweb=notaffe |b=notaffected,openshift-1/j
|cted,rhscl-3/rh-java-common |bossweb=notaffected,rhscl-3
|-tomcat=notaffected,rhel-6/ |/rh-java-common-tomcat=nota
|tomcat6=notaffected,rhel-5/ |ffected,rhel-6/tomcat6=nota
|tomcat5=notaffected,jbews-2 |ffected,rhel-5/tomcat5=nota
|/tomcat6=notaffected,spring |ffected,jbews-2/tomcat6=not
|boot-1/tomcat=affected,fis- |affected,springboot-1/tomca
|2/tomcat8=affected |t=affected,fis-2/tomcat8=af
| |fected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months