https://bugzilla.redhat.com/show_bug.cgi?id=1643043

Andrej Nemec anemec@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1643044

--- Comment #2 from Andrej Nemec anemec@redhat.com --- Created springframework tracking bugs for this issue:

Affects: fedora-all [bug 1643044]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1643044 [Bug 1643044] CVE-2018-15756 springframework: DoS Attack via Range Requests [fedora-all]

https://bugzilla.redhat.com/show_bug.cgi?id=1643043

Doran Moppert dmoppert@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=low,public=20181016, |impact=low,public=20181016, |reported=20181016,source=in |reported=20181016,source=in |ternet,cvss3=3.1/CVSS:3.0/A |ternet,cvss3=3.1/CVSS:3.0/A |V:N/AC:H/PR:L/UI:N/S:U/C:N/ |V:N/AC:H/PR:L/UI:N/S:U/C:N/ |I:N/A:L,cwe=CWE-20,fedora-a |I:N/A:L,cwe=CWE-20,fedora-a |ll/springframework=affected |ll/springframework=affected |,rhes-3/rhevm-dependencies= |,rhes-3/rhevm-dependencies= |new,openstack-12/springfram |notaffected,openstack-12/sp |ework=new,openstack-11/spri |ringframework=new,openstack |ngframework=new,openstack-1 |-11/springframework=new,ope |0/springframework=new,opens |nstack-10/springframework=n |tack-9/springframework=new, |ew,openstack-9/springframew |fuse-7/springframework=new, |ork=new,fuse-7/springframew |fuse-6/springframework=new, |ork=new,fuse-6/springframew |fsw-6/springframework=new,b |ork=new,fsw-6/springframewo |rms-5/springframework=new,j |rk=new,brms-5/springframewo |dv-6/springframework=new,so |rk=new,jdv-6/springframewor |ap-5/springframework=new,rh |k=new,soap-5/springframewor |ev-m-4/rhvm-dependencies=ne |k=new,rhev-m-4/rhvm-depende |w |ncies=notaffected

https://bugzilla.redhat.com/show_bug.cgi?id=1643043

James Hebden jhebden@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |dbecker@redhat.com Whiteboard|impact=low,public=20181016, |impact=low,public=20181016, |reported=20181016,source=in |reported=20181016,source=in |ternet,cvss3=3.1/CVSS:3.0/A |ternet,cvss3=3.1/CVSS:3.0/A |V:N/AC:H/PR:L/UI:N/S:U/C:N/ |V:N/AC:H/PR:L/UI:N/S:U/C:N/ |I:N/A:L,cwe=CWE-20,fedora-a |I:N/A:L,cwe=CWE-20,fedora-a |ll/springframework=affected |ll/springframework=affected |,rhes-3/rhevm-dependencies= |,rhes-3/rhevm-dependencies= |notaffected,openstack-12/sp |notaffected,openstack-12/sp |ringframework=new,openstack |ringframework=notaffected,o |-11/springframework=new,ope |penstack-11/springframework |nstack-10/springframework=n |=notaffected,openstack-10/s |ew,openstack-9/springframew |pringframework=notaffected, |ork=new,fuse-7/springframew |openstack-9/springframework |ork=new,fuse-6/springframew |=notaffected,fuse-7/springf |ork=new,fsw-6/springframewo |ramework=new,fuse-6/springf |rk=new,brms-5/springframewo |ramework=new,fsw-6/springfr |rk=new,jdv-6/springframewor |amework=new,brms-5/springfr |k=new,soap-5/springframewor |amework=new,jdv-6/springfra |k=new,rhev-m-4/rhvm-depende |mework=new,soap-5/springfra |ncies=notaffected |mework=new,rhev-m-4/rhvm-de | |pendencies=notaffected

--- Comment #4 from James Hebden jhebden@redhat.com --- Spring Framework, as used in Open Daylight, as part of RHOSP, does not ship or use an affected version of Spring Framework.