[Bug 1677636] New: CVE-2019-8343 nasm: use-after-free in paste_tokens in asm/preproc.c
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1677636
Bug ID: 1677636
Summary: CVE-2019-8343 nasm: use-after-free in paste_tokens in
asm/preproc.c
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=important,public=20190214,reported=20190215,sou
rce=cve,cvss3=7.8/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H
/I:H/A:H,cwe=CWE-416,fedora-all/nasm=affected,rhel-5/n
asm=new,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=ne
w
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: dominik(a)greysector.net, i.gnatenko.brain(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
In Netwide Assembler (NASM) 2.14.02, there is a use-after-free in paste_tokens
in asm/preproc.c.
Reference:
https://bugzilla.nasm.us/show_bug.cgi?id=3392556
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1699701] New: CVE-2019-1003049 jenkins: Jenkins accepted cached legacy CLI authentication
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1699701
Bug ID: 1699701
Summary: CVE-2019-1003049 jenkins: Jenkins accepted cached
legacy CLI authentication
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190410,reported=20190412,sour
ce=oss-security,cvss3=5.0/CVSS:3.0/AV:N/AC:H/PR:L/UI:N
/S:U/C:L/I:L/A:L,cwe=CWE-592,openshift-enterprise-3.4/
jenkins=new,openshift-enterprise-3.5/jenkins=new,opens
hift-enterprise-3.6/jenkins=new,openshift-enterprise-3
.7/jenkins=new,openshift-enterprise-3.9/jenkins=new,op
enshift-enterprise-3.10/jenkins=new,openshift-enterpri
se-3.11/jenkins=new,openshift-enterprise-4.1/jenkins=n
ew,fedora-all/jenkins=affected
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: sfowler(a)redhat.com
CC: adam.kaplan(a)redhat.com, ahardin(a)redhat.com,
aos-bugs(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
mmccomas(a)redhat.com, msrb(a)redhat.com,
obulatov(a)redhat.com, wzheng(a)redhat.com
Blocks: 1699336
Target Milestone: ---
Classification: Other
The fix for SECURITY-901/CVE-2019-1003004 in Jenkins 2.150.2 and 2.160 did not
reject existing remoting-based CLI authentication caches.
This means that users who cached their CLI authentication before Jenkins was
updated to 2.150.2 and newer, or 2.160 and newer, would remain authenticated.
Support for the remoting-based CLI was dropped in Jenkins 2.165, so newer
weekly releases are not affected. Jenkins 2.164.2 no longer supports legacy CLI
authentication caches from before 2.150.2/2.160, and these users will be
considered logged out.
External References:
https://jenkins.io/security/advisory/2019-04-10/#SECURITY-1289
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1699702] New: CVE-2019-1003049 jenkins: Jenkins accepted cached legacy CLI authentication [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1699702
Bug ID: 1699702
Summary: CVE-2019-1003049 jenkins: Jenkins accepted cached
legacy CLI authentication [fedora-all]
Product: Fedora
Version: 29
Status: NEW
Component: jenkins
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: msrb(a)redhat.com
Reporter: sfowler(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1699333] New: CVE-2019-1003050 jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability.
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1699333
Bug ID: 1699333
Summary: CVE-2019-1003050 jenkins: Improper escaping of job
URLs in f:validateButton leads to cross-site scripting
vulnerability.
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190410,reported=20190412,sour
ce=oss-security,cvss3=5.4/CVSS:3.0/AV:N/AC:L/PR:L/UI:R
/S:C/C:L/I:L/A:N,cwe=CWE-79,openshift-enterprise-3.4/j
enkins=new,openshift-enterprise-3.5/jenkins=new,opensh
ift-enterprise-3.6/jenkins=new,openshift-enterprise-3.
7/jenkins=new,openshift-enterprise-3.9/jenkins=new,ope
nshift-enterprise-3.10/jenkins=new,openshift-enterpris
e-3.11/jenkins=new,openshift-enterprise-4.1/jenkins=ne
w,fedora-all/jenkins=affected
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mrehak(a)redhat.com
CC: adam.kaplan(a)redhat.com, ahardin(a)redhat.com,
aos-bugs(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dedgar(a)redhat.com,
eparis(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jgoulding(a)redhat.com, jokerman(a)redhat.com,
mchappel(a)redhat.com, mizdebsk(a)redhat.com,
mmccomas(a)redhat.com, msrb(a)redhat.com,
obulatov(a)redhat.com, wzheng(a)redhat.com
Target Milestone: ---
Classification: Other
The f:validateButton form control for the Jenkins UI did not properly escape
job URLs. This resulted in a cross-site scripting (XSS) vulnerability
exploitable by users with the ability to control job names.
External References:
https://jenkins.io/security/advisory/2019-04-10/
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1699334] New: CVE-2019-1003050 jenkins: Improper escaping of job URLs in f:validateButton leads to cross-site scripting vulnerability. [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1699334
Bug ID: 1699334
Summary: CVE-2019-1003050 jenkins: Improper escaping of job
URLs in f:validateButton leads to cross-site scripting
vulnerability. [fedora-all]
Product: Fedora
Version: 29
Status: NEW
Component: jenkins
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: msrb(a)redhat.com
Reporter: mrehak(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1663908] New: CVE-2018-20538 nasm: Use-after-free at asm/preproc.c resulting in a denial of service
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1663908
Bug ID: 1663908
Summary: CVE-2018-20538 nasm: Use-after-free at asm/preproc.c
resulting in a denial of service
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=low,public=20181118,reported=20181228,source=cv
e,cvss3=3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A
:L,cwe=CWE-416,fedora-all/nasm=affected,rhel-5/nasm=ne
w,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
A use-after-free vulnerability was found in nasm. A specially crafted file
could cause the application to crash.
Upstream issue:
https://bugzilla.nasm.us/show_bug.cgi?id=3392531
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1663907] New: CVE-2018-20535 nasm: Use-after-free at asm/preproc.c resulting in a denial of service
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1663907
Bug ID: 1663907
Summary: CVE-2018-20535 nasm: Use-after-free at asm/preproc.c
resulting in a denial of service
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=low,public=20181118,reported=20181228,source=cv
e,cvss3=3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A
:L,cwe=CWE-416,fedora-all/nasm=affected,rhel-5/nasm=ne
w,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
A use-after-free vulnerability was found in nasm. A specially crafted file
could cause the application to crash.
Upstream issue:
https://bugzilla.nasm.us/show_bug.cgi?id=3392530
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1663906] New: CVE-2018-1000886 nasm: Buffer overflow in asm/stdscan.c:130 resulting in a denial of service
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1663906
Bug ID: 1663906
Summary: CVE-2018-1000886 nasm: Buffer overflow in
asm/stdscan.c:130 resulting in a denial of service
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=low,public=20180906,reported=20181221,source=cv
e,cvss3=3.3/CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A
:L,cwe=CWE-122,fedora-all/nasm=affected,rhel-5/nasm=ne
w,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
A buffer overflow vulnerability was found in nasm. A specially crafted file
could trigger endless macro generation and cause the application to crash.
Upstream issue:
https://bugzilla.nasm.us/show_bug.cgi?id=3392514
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1663909] New: CVE-2018-1000886 CVE-2018-20535 CVE-2018-20538 nasm: various flaws [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1663909
Bug ID: 1663909
Summary: CVE-2018-1000886 CVE-2018-20535 CVE-2018-20538 nasm:
various flaws [fedora-all]
Product: Fedora
Version: 29
Status: NEW
Component: nasm
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: mizdebsk(a)redhat.com
Reporter: anemec(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months
[Bug 1670704] New: CVE-2019-7147 nasm: Buffer over-read in function crc64ib in crc64.c resulting in denial of service.
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1670704
Bug ID: 1670704
Summary: CVE-2019-7147 nasm: Buffer over-read in function
crc64ib in crc64.c resulting in denial of service.
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Whiteboard: impact=moderate,public=20190101,reported=20190129,sour
ce=cve,cvss3=6.5/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/
I:N/A:H,cwe=CWE-400,fedora-all/nasm=affected,rhel-5/na
sm=new,rhel-6/nasm=new,rhel-7/nasm=new,rhel-8/nasm=new
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: dominik(a)greysector.net,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, nickc(a)redhat.com
Target Milestone: ---
Classification: Other
A buffer over-read exists in the function crc64ib in crc64.c in nasmlib in
Netwide Assembler (NASM) 2.14rc16. A crafted asm input can cause segmentation
faults, leading to denial-of-service.
References:
https://bugzilla.nasm.us/show_bug.cgi?id=3392544
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 4 months