[Bug 1605391] pdfbox: FTBFS in Fedora rawhide
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1605391
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Fixed In Version| |pdfbox-2.0.9-4.fc29
Resolution|--- |ERRATA
Last Closed| |2018-12-13 02:15:55
--- Comment #7 from Fedora Update System <updates(a)fedoraproject.org> ---
pdfbox-2.0.9-4.fc29 has been pushed to the Fedora 29 stable repository. If
problems still persist, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1652285] pdfbox-examples uninstallable
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1652285
Fedora Update System <updates(a)fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ON_QA |CLOSED
Fixed In Version| |pdfbox-2.0.9-4.fc29
Resolution|--- |ERRATA
Last Closed| |2018-12-13 02:15:54
--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org> ---
pdfbox-2.0.9-4.fc29 has been pushed to the Fedora 29 stable repository. If
problems still persist, please make note of it in this bug report.
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1579611] CVE-2018-8014 tomcat: Insecure defaults in CORS filter enable 'supportsCredentials' for all origins
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1579611
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=moderate,public=2018 |impact=moderate,public=2018
|0517,reported=20180518,sour |0517,reported=20180518,sour
|ce=internet,cvss3=5.7/CVSS: |ce=internet,cvss3=5.7/CVSS:
|3.0/AV:N/AC:L/PR:L/UI:R/S:U |3.0/AV:N/AC:L/PR:L/UI:R/S:U
|/C:H/I:N/A:N,cwe=CWE-284,fe |/C:H/I:N/A:N,cwe=CWE-284,fe
|dora-all/tomcat=affected,ep |dora-all/tomcat=affected,ep
|el-all/tomcat=affected,rhsc |el-all/tomcat=affected,rhsc
|l-3/rh-java-common-tomcat=n |l-3/rh-java-common-tomcat=n
|otaffected,bpms-6/tomcat=no |otaffected,bpms-6/tomcat=no
|taffected,brms-6/tomcat=not |taffected,brms-6/tomcat=not
|affected,brms-5/jbossweb=no |affected,brms-5/jbossweb=no
|taffected,eap-5/jbossweb=ne |taffected,eap-5/jbossweb=ne
|w,eap-6/jbossweb=notaffecte |w,eap-6/jbossweb=notaffecte
|d,jdg-6/jbossweb=notaffecte |d,jdg-6/jbossweb=notaffecte
|d,jdg-7/tomcat=notaffected, |d,jdg-7/tomcat=notaffected,
|jdv-6/jbossweb=notaffected, |jdv-6/jbossweb=notaffected,
|soap-5/jbossweb=notaffected |soap-5/jbossweb=notaffected
|,fuse-7/tomcat=affected,fus |,fuse-7/tomcat=affected,fus
|e-6/jbossweb=wontfix,fsw-6/ |e-6/jbossweb=wontfix,fsw-6/
|jbossweb=wontfix,fis-2/tomc |jbossweb=wontfix,fis-2/tomc
|at=affected,springboot-1/to |at=affected,springboot-1/to
|mcat=affected,jbews-2/tomca |mcat=affected,jbews-2/tomca
|t6=notaffected,jbews-2/tomc |t6=notaffected,jbews-2/tomc
|at7=wontfix,jws-3/tomcat7=a |at7=wontfix,jws-3/tomcat7=a
|ffected,jws-3/tomcat8=affec |ffected,jws-3/tomcat8=affec
|ted,rhel-8/tomcat=affected, |ted,rhel-7/tomcat=affected,
|rhel-7/tomcat=affected,rhel |rhel-6/tomcat6=notaffected,
|-6/tomcat6=notaffected,jon- |jon-3/jbossweb=notaffected,
|3/jbossweb=notaffected,open |openshift-online-2/jbossweb
|shift-online-2/jbossweb=aff |=affected,rhel-8/pki-servle
|ected |t-container=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1607582] CVE-2018-8037 tomcat: Due to a mishandling of close in NIO/NIO2 connectors user sessions can get mixed up
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1607582
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=important,public=201 |impact=important,public=201
|80722,reported=20180722,sou |80722,reported=20180722,sou
|rce=internet,cvss3=9.1/CVSS |rce=internet,cvss3=9.1/CVSS
|:3.0/AV:N/AC:L/PR:N/UI:N/S: |:3.0/AV:N/AC:L/PR:N/UI:N/S:
|U/C:H/I:H/A:N,fedora-all/to |U/C:H/I:H/A:N,fedora-all/to
|mcat=affected,rhscl-3/rh-ja |mcat=affected,rhscl-3/rh-ja
|va-common-tomcat=notaffecte |va-common-tomcat=notaffecte
|d,bpms-6/tomcat=notaffected |d,bpms-6/tomcat=notaffected
|,epel-all/tomcat=affected,b |,epel-all/tomcat=affected,b
|rms-6/tomcat=notaffected,br |rms-6/tomcat=notaffected,br
|ms-5/jbossweb=notaffected,e |ms-5/jbossweb=notaffected,e
|ap-6/jbossweb=notaffected,e |ap-6/jbossweb=notaffected,e
|ap-5/jbossweb=notaffected,j |ap-5/jbossweb=notaffected,j
|dg-6/jbossweb=notaffected,j |dg-6/jbossweb=notaffected,j
|dg-7/tomcat=notaffected,jdv |dg-7/tomcat=notaffected,jdv
|-6/jbossweb=notaffected,fus |-6/jbossweb=notaffected,fus
|e-6/tomcat=notaffected,fuse |e-6/tomcat=notaffected,fuse
|-7/tomcat=notaffected,soap- |-7/tomcat=notaffected,soap-
|5/jbossweb=notaffected,fsw- |5/jbossweb=notaffected,fsw-
|6/jbossweb=notaffected,spri |6/jbossweb=notaffected,spri
|ngboot-1/tomcat=affected,jb |ngboot-1/tomcat=affected,jb
|ews-2/tomcat6=notaffected,j |ews-2/tomcat6=notaffected,j
|ws-3/tomcat7=notaffected,jb |ws-3/tomcat7=notaffected,jb
|ews-2/tomcat7=notaffected,r |ews-2/tomcat7=notaffected,r
|hel-7/tomcat=notaffected,jw |hel-7/tomcat=notaffected,jw
|s-3/tomcat8=notaffected,rhe |s-3/tomcat8=notaffected,rhe
|l-6/tomcat6=notaffected,jon |l-6/tomcat6=notaffected,jon
|-3/jbossweb=notaffected,jws |-3/jbossweb=notaffected,jws
|-5/tomcat=affected |-5/tomcat=affected,rhel-8/p
| |ki-servlet-container=affect
| |ed
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months
[Bug 1607580] CVE-2018-8034 tomcat: host name verification missing in WebSocket client
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1607580
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rhcs-maint(a)redhat.com
Whiteboard|impact=low,public=20180722, |impact=low,public=20180722,
|reported=20180722,source=in |reported=20180722,source=in
|ternet,cvss3=4.3/CVSS:3.0/A |ternet,cvss3=4.3/CVSS:3.0/A
|V:N/AC:L/PR:N/UI:R/S:U/C:N/ |V:N/AC:L/PR:N/UI:R/S:U/C:N/
|I:L/A:N,cwe=CWE-20,fedora-a |I:L/A:N,cwe=CWE-20,fedora-a
|ll/tomcat=affected,rhscl-3/ |ll/tomcat=affected,rhscl-3/
|rh-java-common-tomcat=notaf |rh-java-common-tomcat=notaf
|fected,bpms-6/tomcat=notaff |fected,bpms-6/tomcat=notaff
|ected,epel-all/tomcat=affec |ected,epel-all/tomcat=affec
|ted,brms-6/tomcat=notaffect |ted,brms-6/tomcat=notaffect
|ed,brms-5/jbossweb=notaffec |ed,brms-5/jbossweb=notaffec
|ted,eap-5/jbossweb=notaffec |ted,eap-5/jbossweb=notaffec
|ted,eap-6/jbossweb=affected |ted,eap-6/jbossweb=affected
|,jdg-6/jbossweb=notaffected |,jdg-6/jbossweb=notaffected
|,jdg-7/tomcat=notaffected,j |,jdg-7/tomcat=notaffected,j
|dv-6/jbossweb=wontfix,fuse- |dv-6/jbossweb=wontfix,fuse-
|6/tomcat=wontfix,fuse-7/tom |6/tomcat=wontfix,fuse-7/tom
|cat=affected,soap-5/jbosswe |cat=affected,soap-5/jbosswe
|b=notaffected,fsw-6/jbosswe |b=notaffected,fsw-6/jbosswe
|b=wontfix,jbews-2/tomcat6=n |b=wontfix,jbews-2/tomcat6=n
|otaffected,springboot-1/tom |otaffected,springboot-1/tom
|cat=affected,jws-3/tomcat7= |cat=affected,jws-3/tomcat7=
|affected,jbews-2/tomcat7=wo |affected,jbews-2/tomcat7=wo
|ntfix,rhel-8/tomcat=affecte |ntfix,rhel-8/pki-servlet-co
|d,rhel-7/tomcat=affected,jw |ntainer=affected,rhel-7/tom
|s-3/tomcat8=affected,rhel-6 |cat=affected,jws-3/tomcat8=
|/tomcat6=notaffected,jon-3/ |affected,rhel-6/tomcat6=not
|jbossweb=wontfix,jws-5/tomc |affected,jon-3/jbossweb=won
|at=affected |tfix,jws-5/tomcat=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 4 months