https://bugzilla.redhat.com/show_bug.cgi?id=2157640
Bug ID: 2157640
Summary: CVE-2022-4245 maven-antrun-plugin: codehaus-plexus:
XML External Entity (XXE) Injection [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven-antrun-plugin
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149843
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157640
https://bugzilla.redhat.com/show_bug.cgi?id=2157639
Bug ID: 2157639
Summary: CVE-2022-4245 maven: codehaus-plexus: XML External
Entity (XXE) Injection [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149843
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157639
https://bugzilla.redhat.com/show_bug.cgi?id=2157636
Bug ID: 2157636
Summary: CVE-2022-4244 maven-source-plugin: codehaus-plexus:
Directory Traversal [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven-source-plugin
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149841
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157636
https://bugzilla.redhat.com/show_bug.cgi?id=2157635
Bug ID: 2157635
Summary: CVE-2022-4244 maven-plugin-bundle: codehaus-plexus:
Directory Traversal [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven-plugin-bundle
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149841
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157635
https://bugzilla.redhat.com/show_bug.cgi?id=2157634
Bug ID: 2157634
Summary: CVE-2022-4244 maven-compiler-plugin: codehaus-plexus:
Directory Traversal [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven-compiler-plugin
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149841
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157634
https://bugzilla.redhat.com/show_bug.cgi?id=2157633
Bug ID: 2157633
Summary: CVE-2022-4244 maven-antrun-plugin: codehaus-plexus:
Directory Traversal [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven-antrun-plugin
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149841
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157633
https://bugzilla.redhat.com/show_bug.cgi?id=2157632
Bug ID: 2157632
Summary: CVE-2022-4244 maven: codehaus-plexus: Directory
Traversal [fedora-37]
Product: Fedora
Version: 37
Status: NEW
Component: maven
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mizdebsk(a)redhat.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2149841
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2157632
https://bugzilla.redhat.com/show_bug.cgi?id=2152479
Bug ID: 2152479
Summary: CVE-2022-41854 log4j: dev-java/snakeyaml: DoS via
stack overflow [fedora-all]
Product: Fedora
Version: 37
Status: NEW
Component: log4j
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: paul.wouters(a)aiven.io
Reporter: ahanwate(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, devrim(a)gunduz.org,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, paul.wouters(a)aiven.io
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2151988
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2152479
https://bugzilla.redhat.com/show_bug.cgi?id=2145200
Bug ID: 2145200
Summary: CVE-2022-45047 apache-sshd: mina-sshd: Java unsafe
deserialization vulnerability [fedora-all]
Product: Fedora
Version: 37
Status: NEW
Component: apache-sshd
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mat.booth(a)gmail.com
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)gmail.com, msrb(a)redhat.com,
puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2145194
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2145200