https://bugzilla.redhat.com/show_bug.cgi?id=2244893
Bug ID: 2244893
Summary: CVE-2023-44981 zookeeper: Authorization Bypass in
Apache ZooKeeper [fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: zookeeper
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: extras-orphan(a)fedoraproject.org
Reporter: ntait(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ctubbsii(a)fedoraproject.org,
extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2243436
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2244893
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2243327
Bug ID: 2243327
Summary: [Major Incident] CVE-2023-44487 jetty: HTTP/2:
Multiple HTTP/2 enabled web servers are vulnerable to
a DDoS attack (Rapid Reset Attack) [fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: jetty
Keywords: Security, SecurityTracking
Severity: high
Priority: urgent
Assignee: mat.booth(a)gmail.com
Reporter: askrabec(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjohnstn(a)redhat.com, mat.booth(a)gmail.com,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2242803
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2243327
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2242517
Bug ID: 2242517
Summary: CVE-2023-37460 plexus-archiver: Arbitrary File
Creation in AbstractUnArchiver [fedora-38]
Product: Fedora
Version: 38
Status: NEW
Component: plexus-archiver
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mizdebsk(a)redhat.com
Reporter: ntait(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2242288
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2242517
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2239842
Bug ID: 2239842
Summary: TRIAGE-CVE-2023-36479 jetty: Improper addition of
quotation marks to user inputs in CgiServlet
[fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: jetty
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: mat.booth(a)gmail.com
Reporter: psampaio(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjohnstn(a)redhat.com, mat.booth(a)gmail.com,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2239630
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2239842
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2236342
Bug ID: 2236342
Summary: CVE-2023-26049 log4j: jetty-server: Cookie parsing of
quoted values can exfiltrate values from other cookies
[fedora-all]
Product: Fedora
Version: 38
Status: NEW
Component: log4j
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: paul.wouters(a)aiven.io
Reporter: pdelbell(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: devrim(a)gunduz.org, italo.garcia+fedora(a)aiven.io,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, paul.wouters(a)aiven.io,
rj.layco(a)gmail.com, rominf(a)aiven.io
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2236341
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2236342
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2269611
Bug ID: 2269611
Summary: CVE-2024-24549 tomcat: CVE-2024-24549: Apache Tomcat:
HTTP/2 header handling DoS [fedora-all]
Product: Fedora
Version: 39
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: huwang(a)redhat.com
Reporter: zmiele(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, csutherl(a)redhat.com,
gzaronikas(a)gmail.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2269607
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2269611
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...
https://bugzilla.redhat.com/show_bug.cgi?id=2269612
Bug ID: 2269612
Summary: CVE-2024-23672 tomcat: Apache Tomcat: WebSocket DoS
with incomplete closing handshake [fedora-all]
Product: Fedora
Version: 39
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: huwang(a)redhat.com
Reporter: zmiele(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, csutherl(a)redhat.com,
gzaronikas(a)gmail.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
More information about this security flaw is available in the following bug:
http://bugzilla.redhat.com/show_bug.cgi?id=2269608
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2269612
Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-...