https://bugzilla.redhat.com/show_bug.cgi?id=1584407
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1588276, 1588277
--- Comment #7 from Doran Moppert <dmoppert(a)redhat.com> ---
Created ant tracking bugs for this issue:
Affects: fedora-all [bug 1588277]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1588277
[Bug 1588277] ant: arbitrary file write vulnerability / arbitrary code
execution using a specially crafted zip file [fedora-all]
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1584388
--- Comment #3 from Doran Moppert <dmoppert(a)redhat.com> ---
Statement:
This is not a true vulnerability in apache-commons-compress, but a risk for
software using apache-commons-compress to extract archives. Malicious archives
can include absolute paths or relative paths including "../" that can cause
naive extractors to create or overwrite files outside the destination
directory.
Software that may be vulnerable can be identified by its use of
org.apache.commons.compress to read archives (usually via *InputStream objects)
and extract their contents to disk. Prior to creating any file, its path must
be fully normalized and checked to ensure it lies within the intended
destination directory. An example of a vulnerable usage and a suitable fix can
be found in bug 1584392 (plexus-archiver). Further care must be taken if the
extractor supports filesystem objects other than directories and files: for
example, hard links, symbolic links, device nodes and even sparse files can
present further security risks.
Red Hat Product Security has examined the following users of
apache-commons-compress and believes them to be safe:
* ovirt-engine: notaffected: reads archives, does not create files
* tika: notaffected: reads archives, does not create files
* apache-rat: notaffected: reads archives, does not create files
* eclipse-jgit: notaffected: does not read archives
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1584407
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |abergmann(a)suse.com,
| |akurtako(a)redhat.com,
| |jaromir.capik(a)email.cz,
| |java-maint(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |meissner(a)suse.de,
| |mizdebsk(a)redhat.com,
| |msimacek(a)redhat.com,
| |msrb(a)redhat.com
Summary|EMBARGOED ant: arbitrary |ant: arbitrary file write
|file write vulnerability / |vulnerability / arbitrary
|arbitrary code execution |code execution using a
|using a specially crafted |specially crafted zip file
|zip file |
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1584392
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1587818, 1587817, 1587816
--- Comment #10 from Andrej Nemec <anemec(a)redhat.com> ---
Created plexus-archiver tracking bugs for this issue:
Affects: fedora-27 [bug 1587818]
Affects: fedora-28 [bug 1587817]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1587817
[Bug 1587817] CVE-2018-1002200 plexus-archiver: arbitrary file write
vulnerability / arbitrary code execution using a specially crafted zip file
[fedora-28]
https://bugzilla.redhat.com/show_bug.cgi?id=1587818
[Bug 1587818] CVE-2018-1002200 plexus-archiver: arbitrary file write
vulnerability / arbitrary code execution using a specially crafted zip file
[fedora-27]
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1584392
Andrej Nemec <anemec(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |dbhole(a)redhat.com,
| |jaromir.capik(a)email.cz,
| |java-maint(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |msimacek(a)redhat.com
Summary|EMBARGOED plexus-archiver: |CVE-2018-1002200
|arbitrary file write |plexus-archiver: arbitrary
|vulnerability / arbitrary |file write vulnerability /
|code execution using a |arbitrary code execution
|specially crafted zip file |using a specially crafted
| |zip file
Alias| |CVE-2018-1002200
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1576715
Bug ID: 1576715
Summary: jenkins: various flaws [fedora-all]
Product: Fedora
Version: 28
Component: jenkins
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: msrb(a)redhat.com
Reporter: amaris(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1576706
Bug ID: 1576706
Summary: jenkins: CLI and UI allow non-admin users to enumerate
installed plugins (SECURITY-771)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: ahardin(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
kseifried(a)redhat.com, mchappel(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Users with Overall/Read permission were able use the list-plugins CLI command
and view the About Jenkins page to list all installed plugins.
External References:
https://jenkins.io/security/advisory/2018-05-09/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1576708
Bug ID: 1576708
Summary: jenkins: Users were able to register user names
containing control characters (SECURITY-786)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: ahardin(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
kseifried(a)redhat.com, mchappel(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com
The built-in Jenkins user database optionally allows user registration. This
feature did not properly sanitize user names, allowing registration of user
names containing control characters.
This could be used to confuse administrators (appearing to be a different user)
while preventing deletion of such users through the UI.
External References:
https://jenkins.io/security/advisory/2018-05-09/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1576711
Bug ID: 1576711
Summary: jenkins: Path traversal vulnerability in agent to
master security subsystem (SECURITY-788)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: ahardin(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
kseifried(a)redhat.com, mchappel(a)redhat.com,
mizdebsk(a)redhat.com, msrb(a)redhat.com
The agent to master security subsystem ensures that the Jenkins master is
protected from maliciously configured agents. A path traversal vulnerability
allowed agents to escape whitelisted directories to read and write to files
they should not be able to access.
External References:
https://jenkins.io/security/advisory/2018-05-09/
--
You are receiving this mail because:
You are on the CC list for the bug.