[Bug 1819212] New: CVE-2020-10969 jackson-databind: serialization gadgets in javax.swing
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1819212
Bug ID: 1819212
Summary: CVE-2020-10969 jackson-databind: serialization gadgets
in javax.swing
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aboyko(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
aos-bugs(a)redhat.com, asoldano(a)redhat.com,
atangrin(a)redhat.com, ataylor(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bbuckingham(a)redhat.com, bcourt(a)redhat.com,
bgeorges(a)redhat.com, bkearney(a)redhat.com,
bmaxwell(a)redhat.com, bmontgom(a)redhat.com,
brian.stansberry(a)redhat.com, btotty(a)redhat.com,
cbyrne(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, cmacedo(a)redhat.com,
darran.lofthouse(a)redhat.com, dbecker(a)redhat.com,
decathorpe(a)gmail.com, dffrench(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, drusso(a)redhat.com,
eparis(a)redhat.com, etirelli(a)redhat.com,
ganandan(a)redhat.com, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, hhorak(a)redhat.com,
hhudgeon(a)redhat.com, ibek(a)redhat.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jbalunas(a)redhat.com,
jburrell(a)redhat.com, jcantril(a)redhat.com,
jjoyce(a)redhat.com, jmadigan(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jorton(a)redhat.com, jpallich(a)redhat.com,
jperkins(a)redhat.com, jschluet(a)redhat.com,
jshepherd(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, kbasil(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lef(a)fedoraproject.org,
lgao(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com,
lthon(a)redhat.com, lzap(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mmccune(a)redhat.com,
mnovotny(a)redhat.com, msochure(a)redhat.com,
msvehla(a)redhat.com, mszynkie(a)redhat.com,
ngough(a)redhat.com, nmoumoul(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
paradhya(a)redhat.com, pdrozd(a)redhat.com,
pgallagh(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, psotirop(a)redhat.com,
puntogil(a)libero.it, pwright(a)redhat.com,
rchan(a)redhat.com, rguimara(a)redhat.com,
rhcs-maint(a)redhat.com, rjerrido(a)redhat.com,
rrajasek(a)redhat.com, rruss(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
rsynek(a)redhat.com, sclewis(a)redhat.com,
scohen(a)redhat.com, sdaley(a)redhat.com,
slinaber(a)redhat.com, smaestri(a)redhat.com,
sokeeffe(a)redhat.com, sponnaga(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org,
sthorger(a)redhat.com, swoodman(a)redhat.com,
tbrisker(a)redhat.com, tom.jenkinson(a)redhat.com,
trepel(a)redhat.com
Target Milestone: ---
Classification: Other
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction
between serialization gadgets and typing, related to javax.swing.JEditorPane.
Reference:
https://github.com/FasterXML/jackson-databind/issues/2642
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years
[Bug 1824088] New: gradle package missing
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1824088
Bug ID: 1824088
Summary: gradle package missing
Product: Fedora
Version: 31
Status: NEW
Component: gradle
Assignee: extras-orphan(a)fedoraproject.org
Reporter: andreas.buesching(a)posteo.de
QA Contact: extras-qa(a)fedoraproject.org
CC: dan(a)danieljamesscott.org, decathorpe(a)gmail.com,
extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjelen(a)redhat.com, lkundrak(a)v3.sk, mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
The package gradle can not be found anymore
Version-Release number of selected component (if applicable):
any version
How reproducible:
sudo dnf search gradle
Steps to Reproduce:
1. search for the package gradle
Actual results:
The package is not found
Expected results:
the package is found
Additional info:
According to the buildsystem it seems that the last build has failed. I'm not
sure if this is somehow related.
https://apps.fedoraproject.org/packages/gradle/builds/
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years
[Bug 1730462] CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1730462
Kunjan Rathod <krathod(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |ascheel(a)redhat.com,
| |dingyichen(a)gmail.com,
| |dmoluguw(a)redhat.com,
| |edewata(a)redhat.com,
| |gmalinko(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |nmoumoul(a)redhat.com,
| |puntogil(a)libero.it,
| |rhcs-maint(a)redhat.com,
| |rstancel(a)redhat.com,
| |sokeeffe(a)redhat.com,
| |stewardship-sig(a)lists.fedor
| |aproject.org,
| |weli(a)redhat.com
Deadline|2020-04-15 |
Summary|EMBARGOED CVE-2020-1695 |CVE-2020-1695 resteasy:
|resteasy: Improper |Improper validation of
|validation of response |response header in
|header in |MediaTypeHeaderDelegate.jav
|MediaTypeHeaderDelegate.jav |a class
|a class |
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years