java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 229 discussions
[Bug 1595639] New: CVE-2017-7656 jetty: HTTP request smuggling using the range header
by bugzilla@redhat.com
5 years, 6 months
[Bug 1595621] New: CVE-2017-7658 jetty: Incorrect header handling
by bugzilla@redhat.com
5 years, 6 months
[Bug 1618574] New: CVE-2018-11771 apache-commons-compress: ZipArchiveInputStream.read() fails to identify correct EOF allowing for DoS via crafted zip [ fedora-all]
by bugzilla@redhat.com
5 years, 6 months
[Bug 1597418] New: CVE-2018-12536 jetty: full server path revealed when using the default Error Handling
by bugzilla@redhat.com
5 years, 6 months
[Bug 1618996] New: apache-commons-compress-1.18 is available
by bugzilla@redhat.com
5 years, 6 months
[Bug 1564405] New: CVE-2018-1270 spring-framework: Possible RCE via spring messaging
by bugzilla@redhat.com
5 years, 6 months
[Bug 1565307] New: CVE-2018-1275 CVE-2018-1275 spring-framework: Address partial fix for CVE-2018-1270
by bugzilla@redhat.com
5 years, 6 months
[Bug 1548289] New: CVE-2018-1304 tomcat: Incorrect handling of empty string URL in security constraints can lead to unitended exposure of resources
by bugzilla@redhat.com
5 years, 6 months
[Bug 1548282] New: CVE-2018-1305 tomcat: Late application of security constraints can lead to resource exposure for unauthorised users
by bugzilla@redhat.com
5 years, 6 months
[Bug 1494283] New: CVE-2017-12617 tomcat: Remote Code Execution bypass for CVE-2017-12615
by bugzilla@redhat.com
5 years, 6 months
Results per page: