[Bug 1657836] gradle: FTBFS in Fedora rawhide
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1657836
--- Comment #3 from Miro Hrončok <mhroncok(a)redhat.com> ---
Possible workaround:
Tag gradle-4.3.1 into rawhide before building newver version of gradle.
$ koji tag-build f31-pending gradle-4.3.1-8.fc29
$ koji wait-repo f31-build --build=gradle-4.3.1-8.fc29
$ fedpkg build
For F30:
$ koji tag-build f30-updates-candidate gradle-4.3.1-8.fc29
$ bodhi overrides save gradle-4.3.1-8.fc29 --wait
$ fedpkg build
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 2 months
[Bug 1548909] CVE-2018-8088 slf4j: Deserialisation vulnerability in EventData constructor can allow for arbitrary code execution
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Paramvir jindal <pjindal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|80222,reported=20180226,sou |80222,reported=20180226,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,cwe=CWE-502 |S:U/C:H/I:H/A:H,cwe=CWE-502
|,fedora-all/slf4j=affected, |,fedora-all/slf4j=affected,
|fedora-all/slf4j-jboss-logm |fedora-all/slf4j-jboss-logm
|anager=affected,openshift-1 |anager=affected,openshift-1
|/slf4j=affected,rhscl-3/rh- |/slf4j=affected,rhscl-3/rh-
|java-common-slf4j=notaffect |java-common-slf4j=notaffect
|ed,sam-1/slf4j=wontfix,jws- |ed,sam-1/slf4j=wontfix,jws-
|3/slf4j=notaffected,brms-5/ |3/slf4j=notaffected,brms-5/
|slf4j=notaffected,brms-6/sl |slf4j=notaffected,brms-6/sl
|f4j=affected,amq-6/slf4j=ne |f4j=affected,amq-6/slf4j=ne
|w,soap-5/slf4j=wontfix,eap- |w,soap-5/slf4j=wontfix,eap-
|5/slf4j=new,eap-6/slf4j=aff |5/slf4j=new,eap-6/slf4j=aff
|ected,eap-7/slf4j=affected, |ected,eap-7/slf4j=affected,
|jbds-11/slf4j=wontfix,jdg-6 |jbds-11/slf4j=wontfix,jdg-6
|/slf4j=notaffected,jdg-7/sl |/slf4j=notaffected,jdg-7/sl
|f4j=affected,jdv-6/slf4j=ne |f4j=affected,jdv-6/slf4j=af
|w,fsw-6/slf4j=new,fuse-6/sl |fected,fsw-6/slf4j=new,fuse
|f4j=new,jon-3/slf4j=affecte |-6/slf4j=new,jon-3/slf4j=af
|d,jpp-6/slf4j=notaffected,r |fected,jpp-6/slf4j=notaffec
|hsso-7/slf4j=affected,rhn_s |ted,rhsso-7/slf4j=affected,
|atellite_6/spacewalk-slf4j= |rhn_satellite_6/spacewalk-s
|notaffected,rhn_satellite_6 |lf4j=notaffected,rhn_satell
|/slf4j=notaffected,rhel-6/s |ite_6/slf4j=notaffected,rhe
|lf4j=wontfix,rhel-7/slf4j=a |l-6/slf4j=wontfix,rhel-7/sl
|ffected,rhel-8/slf4j=affect |f4j=affected,rhel-8/slf4j=a
|ed,rhev-m-4/jboss=affected, |ffected,rhev-m-4/jboss=affe
|vertx-3/slf4j=notaffected,o |cted,vertx-3/slf4j=notaffec
|penstack-8/slf4j-api=notaff |ted,openstack-8/slf4j-api=n
|ected,openstack-9/slf4j-api |otaffected,openstack-9/slf4
|=notaffected,openstack-10/s |j-api=notaffected,openstack
|lf4j-api=notaffected,openst |-10/slf4j-api=notaffected,o
|ack-11/slf4j-api=notaffecte |penstack-11/slf4j-api=notaf
|d,openstack-12/slf4j-api=no |fected,openstack-12/slf4j-a
|taffected,openstack-13/slf4 |pi=notaffected,openstack-13
|j-api=notaffected,rhscl-3/r |/slf4j-api=notaffected,rhsc
|h-maven35-slf4j=affected,fi |l-3/rh-maven35-slf4j=affect
|s-2/slf4j=affected |ed,fis-2/slf4j=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 2 months
[Bug 1528565] CVE-2017-17485 jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-15095)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1528565
Kunjan Rathod <krathod(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=important,public=201 |impact=important,public=201
|71212,reported=20171206,sou |71212,reported=20171206,sou
|rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV
|SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|S:U/C:H/I:H/A:H,eap-6/reste |S:U/C:H/I:H/A:H,eap-6/reste
|asy=affected,fedora-all/jac |asy=affected,fedora-all/jac
|kson-databind=affected,jdg- |kson-databind=affected,jdg-
|7/jackson-databind=notaffec |7/jackson-databind=notaffec
|ted,jon-3/resteasy=affected |ted,jon-3/resteasy=affected
|,openshift-enterprise-2/jac |,openshift-enterprise-2/jac
|kson-databind=affected,dts- |kson-databind=affected,dts-
|4/devtoolset-4-jackson-data |4/devtoolset-4-jackson-data
|bind=wontfix,rhev-m-3/jaspe |bind=wontfix,rhev-m-3/jaspe
|rreports-server-pro=wontfix |rreports-server-pro=wontfix
|,rhev-m-4/eap7-jackson-data |,rhev-m-4/eap7-jackson-data
|bind=affected,amq-6/jackson |bind=affected,amq-6/jackson
|-databind=notaffected,bpms- |-databind=notaffected,bpms-
|6/jackson-databind=new,jdv- |6/jackson-databind=affected
|6/jackson-databind=notaffec |,jdv-6/jackson-databind=not
|ted,fuse-6/jackson-databind |affected,fuse-6/jackson-dat
|=notaffected,rhmap-4/jackso |abind=notaffected,rhmap-4/j
|n-databind=notaffected,rhn_ |ackson-databind=notaffected
|satellite_6/jackson-databin |,rhn_satellite_6/jackson-da
|d=new,rhscl-3/rh-eclipse46- |tabind=new,rhscl-3/rh-eclip
|jackson-databind=affected,r |se46-jackson-databind=affec
|hscl-3/rh-maven35-jackson-d |ted,rhscl-3/rh-maven35-jack
|atabind=affected,sam-1/jack |son-databind=affected,sam-1
|son-databind=wontfix,eap-7/ |/jackson-databind=wontfix,e
|resteasy=affected,brms-6/ja |ap-7/resteasy=affected,brms
|ckson-databind=new,swarm-7/ |-6/jackson-databind=affecte
|jackson-databind=notaffecte |d,swarm-7/jackson-databind=
|d,vertx-3/jackson-databind= |notaffected,vertx-3/jackson
|notaffected |-databind=notaffected
--
You are receiving this mail because:
You are on the CC list for the bug.
5 years, 2 months