https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Kunjan Rathod krathod@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|impact=important,public=201 |impact=important,public=201 |80222,reported=20180226,sou |80222,reported=20180226,sou |rce=researcher,cvss3=8.1/CV |rce=researcher,cvss3=8.1/CV |SS:3.0/AV:N/AC:H/PR:N/UI:N/ |SS:3.0/AV:N/AC:H/PR:N/UI:N/ |S:U/C:H/I:H/A:H,cwe=CWE-502 |S:U/C:H/I:H/A:H,cwe=CWE-502 |,fedora-all/slf4j=affected, |,fedora-all/slf4j=affected, |fedora-all/slf4j-jboss-logm |fedora-all/slf4j-jboss-logm |anager=affected,openshift-1 |anager=affected,openshift-1 |/slf4j=affected,rhscl-3/rh- |/slf4j=affected,rhscl-3/rh- |java-common-slf4j=affected, |java-common-slf4j=affected, |sam-1/slf4j=wontfix,jws-3/s |sam-1/slf4j=wontfix,jws-3/s |lf4j=new,brms-5/slf4j=new,b |lf4j=new,brms-5/slf4j=new,b |rms-6/slf4j=new,amq-6/slf4j |rms-6/slf4j=new,amq-6/slf4j |=new,soap-5/slf4j=new,eap-5 |=new,soap-5/slf4j=new,eap-5 |/slf4j=new,eap-6/slf4j=affe |/slf4j=new,eap-6/slf4j=affe |cted,eap-7/slf4j=affected,j |cted,eap-7/slf4j=affected,j |bds-11/slf4j=new,jdg-6/slf4 |bds-11/slf4j=new,jdg-6/slf4 |j=new,jdg-7/slf4j=new,jdv-6 |j=new,jdg-7/slf4j=new,jdv-6 |/slf4j=new,fsw-6/slf4j=new, |/slf4j=new,fsw-6/slf4j=new, |fuse-6/slf4j=new,jon-3/slf4 |fuse-6/slf4j=new,jon-3/slf4 |j=new,jpp-6/slf4j=new,rhsso |j=new,jpp-6/slf4j=new,rhsso |-7/slf4j=new,rhn_satellite_ |-7/slf4j=new,rhn_satellite_ |6/spacewalk-slf4j=affected, |6/spacewalk-slf4j=affected, |rhn_satellite_6/slf4j=affec |rhn_satellite_6/slf4j=affec |ted,rhel-6/slf4j=wontfix,rh |ted,rhel-6/slf4j=wontfix,rh |el-7/slf4j=affected,rhel-8/ |el-7/slf4j=affected,rhel-8/ |slf4j=affected,rhev-m-4/jbo |slf4j=affected,rhev-m-4/jbo |ss=affected,vertx-3/slf4j=n |ss=affected,vertx-3/slf4j=n |ew,openstack-8/slf4j-api=no |otaffected,openstack-8/slf4 |taffected,openstack-9/slf4j |j-api=notaffected,openstack |-api=notaffected,openstack- |-9/slf4j-api=notaffected,op |10/slf4j-api=notaffected,op |enstack-10/slf4j-api=notaff |enstack-11/slf4j-api=notaff |ected,openstack-11/slf4j-ap |ected,openstack-12/slf4j-ap |i=notaffected,openstack-12/ |i=notaffected,openstack-13/ |slf4j-api=notaffected,opens |slf4j-api=notaffected,rhscl |tack-13/slf4j-api=notaffect |-3/rh-maven35-slf4j=affecte |ed,rhscl-3/rh-maven35-slf4j |d |=affected
--- Comment #14 from Kunjan Rathod krathod@redhat.com --- The vulnerable code appears to be https://github.com/qos-ch/slf4j/blob/c960e8630cdf0ec4a6c5ea687ebe536e9e43ab6..., and it is not shipped in Vertx-3. Hence marking it as not affected.
java-sig-commits@lists.fedoraproject.org