java-sig-commits

java-sig-commits@lists.fedoraproject.org
  • 1 participants
  • 221 discussions
[Bug 1493503] New: CVE-2017-8045 springframework-amqp: Message.toString() deserializes java without a whitelist [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1510970] New: CVE-2017-8028 spring-ldap: Authentication with userSearch and STARTTLS allows authentication with arbitrary password [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1487565] New: CVE-2017-14063 async-http-client: Ivalid URL parsing with '?' [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1471061] New: CVE-2017-1000095 jenkins-script-security-plugin: jenkins-plugin-script-security: Unsafe methods in the default whitelist ( SECURITY-538) [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1512828] New: CVE-2017-9096 itext: External entities not disabled [ fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1497956] New: CVE-2017-12620 opennlp: XXE while loading models or dictionaries with untrusted XML [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1482093] New: CVE-2017-1000107 jenkins-script-security-plugin: jenkins-plugin-script-security, jenkins-plugin-workflow-cps: Multiple Groovy language features allowed Script Security Plugin sandbox bypass [fedora-all]
by bugzilla@redhat.com
2 years
[Bug 1472882] New: CVE-2017-10686 nasm: Use-after-free in the detoken() function
by bugzilla@redhat.com
2 years
[Bug 1332034] New: jenkins-junit-plugin-1.13 is available
by Red Hat Bugzilla
2 years
[Bug 1109506] New: No maven-docck-plugin package in EPEL7
by Red Hat Bugzilla
2 years
Results per page: