[Bug 1493220] New: CVE-2017-12615 tomcat: Remote Code Execution via JSP Upload
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1493220
Bug ID: 1493220
Summary: CVE-2017-12615 tomcat: Remote Code Execution via JSP
Upload
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: akurtako(a)redhat.com, alee(a)redhat.com,
apintea(a)redhat.com, bkundal(a)redhat.com,
bmaxwell(a)redhat.com, ccoleman(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
csutherl(a)redhat.com, darran.lofthouse(a)redhat.com,
dedgar(a)redhat.com, dimitris(a)redhat.com,
dmcphers(a)redhat.com, dosoudil(a)redhat.com,
felias(a)redhat.com, fgavrilo(a)redhat.com,
gzaronik(a)redhat.com, hchiorea(a)redhat.com,
hhorak(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jclere(a)redhat.com,
jcoleman(a)redhat.com, jdoyle(a)redhat.com,
jgoulding(a)redhat.com, jolee(a)redhat.com,
jondruse(a)redhat.com, jorton(a)redhat.com,
jshepherd(a)redhat.com, krzysztof.daniel(a)gmail.com,
lgao(a)redhat.com, loleary(a)redhat.com,
mbabacek(a)redhat.com, me(a)coolsvap.net,
mizdebsk(a)redhat.com, myarboro(a)redhat.com,
nwallace(a)redhat.com, pavelp(a)redhat.com,
pgier(a)redhat.com, pjurak(a)redhat.com,
ppalaga(a)redhat.com, psakar(a)redhat.com,
pslavice(a)redhat.com, rnetuka(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
spinder(a)redhat.com, sstavrev(a)redhat.com,
theute(a)redhat.com, twalsh(a)redhat.com,
vhalbert(a)redhat.com, vtunka(a)redhat.com,
weli(a)redhat.com
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled
(e.g. via setting the readonly initialisation parameter of the Default to
false) it was possible to upload a JSP file to the server via a specially
crafted request. This JSP could then be requested and any code it contained
would be executed by the server.
Affected versions: 7.0.0 to 7.0.79
External References:
https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.81
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1542763] New: ant-1.10.2 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1542763
Bug ID: 1542763
Summary: ant-1.10.2 is available
Product: Fedora
Version: rawhide
Component: ant
Keywords: FutureFeature, Triaged
Assignee: msimacek(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, jaromir.capik(a)email.cz,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com
Latest upstream release: 1.10.2
Current version/release in rawhide: 1.10.1-8.fc28
URL: http://ant.apache.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/50/
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1537610] New: Please retire this package in rawhide
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1537610
Bug ID: 1537610
Summary: Please retire this package in rawhide
Product: Fedora
Version: rawhide
Component: jackson-module-jaxb-annotations
Assignee: puntogil(a)libero.it
Reporter: mat.booth(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, puntogil(a)libero.it
Jackson upstream merged this module into the jackson-modules-base repo
Accordingly, in rawhide/F28+ the jackson-modules-base package was updated and
it now provides a jackson-module-jaxb-annotations sub-package that obsoletes
this standalone RPM. See this build of jackson-modules-base:
https://koji.fedoraproject.org/koji/buildinfo?buildID=1020083
Please retire this package in Fedora 28 onwards.
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1548909] slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Bharti Kundal <bkundal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80222,reported=20180226,sou |80222,reported=20180226,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,cwe=CWE-502 |S:U/C:H/I:H/A:H,cwe=CWE-502
|,fedora-all/slf4j=affected, |,fedora-all/slf4j=affected,
|fedora-all/slf4j-jboss-logm |fedora-all/slf4j-jboss-logm
|anager=affected,openshift-1 |anager=affected,openshift-1
|/slf4j=affected,rhscl-3/rh- |/slf4j=affected,rhscl-3/rh-
|java-common-slf4j=new,sam-1 |java-common-slf4j=new,sam-1
|/slf4j=wontfix,jws-3/slf4j= |/slf4j=wontfix,jws-3/slf4j=
|new,brms-5/slf4j=new,brms-6 |new,brms-5/slf4j=new,brms-6
|/slf4j=new,amq-6/slf4j=new, |/slf4j=new,amq-6/slf4j=new,
|soap-5/slf4j=new,eap-5/slf4 |soap-5/slf4j=new,eap-5/slf4
|j=new,eap-6/slf4j=new,eap-7 |j=new,eap-6/slf4j=affected,
|/slf4j=new,jbds-11/slf4j=ne |eap-7/slf4j=affected,jbds-1
|w,jdg-6/slf4j=new,jdg-7/slf |1/slf4j=new,jdg-6/slf4j=new
|4j=new,jdv-6/slf4j=new,fsw- |,jdg-7/slf4j=new,jdv-6/slf4
|6/slf4j=new,fuse-6/slf4j=ne |j=new,fsw-6/slf4j=new,fuse-
|w,jon-3/slf4j=new,jpp-6/slf |6/slf4j=new,jon-3/slf4j=new
|4j=new,rhsso-7/slf4j=new,rh |,jpp-6/slf4j=new,rhsso-7/sl
|n_satellite_6/spacewalk-slf |f4j=new,rhn_satellite_6/spa
|4j=affected,rhn_satellite_6 |cewalk-slf4j=affected,rhn_s
|/slf4j=affected,rhel-6/slf4 |atellite_6/slf4j=affected,r
|j=new,rhel-7/slf4j=new,rhel |hel-6/slf4j=new,rhel-7/slf4
|-8/slf4j=new,rhev-m-4/jboss |j=new,rhel-8/slf4j=new,rhev
|=new,vertx-3/slf4j=new,open |-m-4/jboss=new,vertx-3/slf4
|stack-8/slf4j-api=notaffect |j=new,openstack-8/slf4j-api
|ed,openstack-9/slf4j-api=no |=notaffected,openstack-9/sl
|taffected,openstack-10/slf4 |f4j-api=notaffected,opensta
|j-api=notaffected,openstack |ck-10/slf4j-api=notaffected
|-11/slf4j-api=notaffected,o |,openstack-11/slf4j-api=not
|penstack-12/slf4j-api=notaf |affected,openstack-12/slf4j
|fected,openstack-13/slf4j-a |-api=notaffected,openstack-
|pi=notaffected |13/slf4j-api=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1548909] slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Summer Long <slong(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80222,reported=20180226,sou |80222,reported=20180226,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,cwe=CWE-502 |S:U/C:H/I:H/A:H,cwe=CWE-502
|,fedora-all/slf4j=affected, |,fedora-all/slf4j=affected,
|fedora-all/slf4j-jboss-logm |fedora-all/slf4j-jboss-logm
|anager=affected,openshift-1 |anager=affected,openshift-1
|/slf4j=affected,rhscl-3/rh- |/slf4j=affected,rhscl-3/rh-
|java-common-slf4j=new,sam-1 |java-common-slf4j=new,sam-1
|/slf4j=wontfix,jws-3/slf4j= |/slf4j=wontfix,jws-3/slf4j=
|new,brms-5/slf4j=new,brms-6 |new,brms-5/slf4j=new,brms-6
|/slf4j=new,amq-6/slf4j=new, |/slf4j=new,amq-6/slf4j=new,
|soap-5/slf4j=new,eap-5/slf4 |soap-5/slf4j=new,eap-5/slf4
|j=new,eap-6/slf4j=new,eap-7 |j=new,eap-6/slf4j=new,eap-7
|/slf4j=new,jbds-11/slf4j=ne |/slf4j=new,jbds-11/slf4j=ne
|w,jdg-6/slf4j=new,jdg-7/slf |w,jdg-6/slf4j=new,jdg-7/slf
|4j=new,jdv-6/slf4j=new,fsw- |4j=new,jdv-6/slf4j=new,fsw-
|6/slf4j=new,fuse-6/slf4j=ne |6/slf4j=new,fuse-6/slf4j=ne
|w,jon-3/slf4j=new,jpp-6/slf |w,jon-3/slf4j=new,jpp-6/slf
|4j=new,rhsso-7/slf4j=new,rh |4j=new,rhsso-7/slf4j=new,rh
|n_satellite_6/spacewalk-slf |n_satellite_6/spacewalk-slf
|4j=affected,rhn_satellite_6 |4j=affected,rhn_satellite_6
|/slf4j=affected,rhel-6/slf4 |/slf4j=affected,rhel-6/slf4
|j=new,rhel-7/slf4j=new,rhel |j=new,rhel-7/slf4j=new,rhel
|-8/slf4j=new,rhev-m-4/jboss |-8/slf4j=new,rhev-m-4/jboss
|=new,vertx-3/slf4j=new,open |=new,vertx-3/slf4j=new,open
|stack-8/slf4j-api=new,opens |stack-8/slf4j-api=notaffect
|tack-9/slf4j-api=new,openst |ed,openstack-9/slf4j-api=no
|ack-10/slf4j-api=new,openst |taffected,openstack-10/slf4
|ack-11/slf4j-api=new,openst |j-api=notaffected,openstack
|ack-12/slf4j-api=new,openst |-11/slf4j-api=notaffected,o
|ack-13/slf4j-api=new |penstack-12/slf4j-api=notaf
| |fected,openstack-13/slf4j-a
| |pi=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1548909] slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Summer Long <slong(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |ccoleman(a)redhat.com,
| |dedgar(a)redhat.com,
| |dmcphers(a)redhat.com,
| |java-maint(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jgoulding(a)redhat.com,
| |lef(a)fedoraproject.org,
| |mgoldman(a)redhat.com,
| |msimacek(a)redhat.com,
| |puntogil(a)libero.it
Summary|EMBARGOED slf4j: |slf4j: Deserialisation
|Deserialisation |vulnerability in EventData
|vulnerability in EventData |constructor can allow for
|constructor can allow for |arbitrary code execution
|arbitrary code execution |
Whiteboard|impact=important,reported=2 |impact=important,public=201
|0180226,source=researcher,c |80222,reported=20180226,sou
|vss3=8.1/CVSS:3.0/AV:N/AC:H |rce=researcher,cvss3=8.1/CV
|/PR:N/UI:N/S:U/C:H/I:H/A:H, |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|cwe=CWE-502,fedora-all/slf4 |S:U/C:H/I:H/A:H,cwe=CWE-502
|j=affected,fedora-all/slf4j |,fedora-all/slf4j=affected,
|-jboss-logmanager=affected, |fedora-all/slf4j-jboss-logm
|openshift-1/slf4j=affected, |anager=affected,openshift-1
|rhscl-3/rh-java-common-slf4 |/slf4j=affected,rhscl-3/rh-
|j=new,sam-1/slf4j=wontfix,j |java-common-slf4j=new,sam-1
|ws-3/slf4j=new,brms-5/slf4j |/slf4j=wontfix,jws-3/slf4j=
|=new,brms-6/slf4j=new,amq-6 |new,brms-5/slf4j=new,brms-6
|/slf4j=new,soap-5/slf4j=new |/slf4j=new,amq-6/slf4j=new,
|,eap-5/slf4j=new,eap-6/slf4 |soap-5/slf4j=new,eap-5/slf4
|j=new,eap-7/slf4j=new,jbds- |j=new,eap-6/slf4j=new,eap-7
|11/slf4j=new,jdg-6/slf4j=ne |/slf4j=new,jbds-11/slf4j=ne
|w,jdg-7/slf4j=new,jdv-6/slf |w,jdg-6/slf4j=new,jdg-7/slf
|4j=new,fsw-6/slf4j=new,fuse |4j=new,jdv-6/slf4j=new,fsw-
|-6/slf4j=new,jon-3/slf4j=ne |6/slf4j=new,fuse-6/slf4j=ne
|w,jpp-6/slf4j=new,rhsso-7/s |w,jon-3/slf4j=new,jpp-6/slf
|lf4j=new,rhn_satellite_6/sp |4j=new,rhsso-7/slf4j=new,rh
|acewalk-slf4j=affected,rhn_ |n_satellite_6/spacewalk-slf
|satellite_6/slf4j=affected, |4j=affected,rhn_satellite_6
|rhel-6/slf4j=new,rhel-7/slf |/slf4j=affected,rhel-6/slf4
|4j=new,rhel-8/slf4j=new,rhe |j=new,rhel-7/slf4j=new,rhel
|v-m-4/jboss=new,vertx-3/slf |-8/slf4j=new,rhev-m-4/jboss
|4j=new,openstack-8/slf4j-ap |=new,vertx-3/slf4j=new,open
|i=new,openstack-9/slf4j-api |stack-8/slf4j-api=new,opens
|=new,openstack-10/slf4j-api |tack-9/slf4j-api=new,openst
|=new,openstack-11/slf4j-api |ack-10/slf4j-api=new,openst
|=new,openstack-12/slf4j-api |ack-11/slf4j-api=new,openst
|=new,openstack-13/slf4j-api |ack-12/slf4j-api=new,openst
|=new |ack-13/slf4j-api=new
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months
[Bug 1549276] CVE-2018-7489 jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1549276
Kurt Seifried <kseifried(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80226,reported=20180226,sou |80226,reported=20180226,sou
|rce=cve,cvss3=8.1/CVSS:3.0/ |rce=cve,cvss3=8.1/CVSS:3.0/
|AV:N/AC:H/PR:N/UI:N/S:U/C:H |AV:N/AC:H/PR:N/UI:N/S:U/C:H
|/I:H/A:H,cwe=CWE-20,amq-6/j |/I:H/A:H,cwe=CWE-20,amq-6/j
|ackson-databind=new,jdg-7/j |ackson-databind=new,jdg-7/j
|ackson-databind=new,jdv-6/j |ackson-databind=new,jdv-6/j
|ackson-databind=new,eap-7/j |ackson-databind=new,eap-7/j
|ackson-databind=new,bpms-6/ |ackson-databind=new,bpms-6/
|jackson-databind=new,brms-6 |jackson-databind=new,brms-6
|/jackson-databind=new,fuse- |/jackson-databind=new,fuse-
|6/jackson-databind=new,open |6/jackson-databind=new,open
|shift-enterprise-2/jackson- |shift-enterprise-2/jackson-
|databind=new,rhn_satellite_ |databind=new,rhn_satellite_
|6/jackson-databind=new/impa |6/jackson-databind=affected
|ct=low,rhmap-4/jackson-data |/impact=low,rhmap-4/jackson
|bind=new,sam-1/jackson-data |-databind=new,sam-1/jackson
|bind=new,rhev-m-3/jasperrep |-databind=wontfix,rhev-m-3/
|orts-server-pro=new,rhev-m- |jasperreports-server-pro=ne
|4/eap7-jackson-databind=new |w,rhev-m-4/eap7-jackson-dat
|,rhscl-2/rh-eclipse46-jacks |abind=new,rhscl-2/rh-eclips
|on-databind=new,fedora-all/ |e46-jackson-databind=new,fe
|jackson-databind=affected,j |dora-all/jackson-databind=a
|on-3/Core |ffected,jon-3/Core
|Server=new,eap-6/jackson-da |Server=new,eap-6/jackson-da
|tabind=new,dts-4/devtoolset |tabind=new,dts-4/devtoolset
|-4-jackson-databind=new,rhs |-4-jackson-databind=new,rhs
|cl-3/rh-maven35-jackson-dat |cl-3/rh-maven35-jackson-dat
|abind=new,vertx-3/jackson-d |abind=new,vertx-3/jackson-d
|atabind=new,swarm-7/jackson |atabind=new,swarm-7/jackson
|-databind=new |-databind=new
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 2 months