https://bugzilla.redhat.com/show_bug.cgi?id=1548909
Summer Long <slong(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |ccoleman(a)redhat.com,
| |dedgar(a)redhat.com,
| |dmcphers(a)redhat.com,
| |java-maint(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jgoulding(a)redhat.com,
| |lef(a)fedoraproject.org,
| |mgoldman(a)redhat.com,
| |msimacek(a)redhat.com,
| |puntogil(a)libero.it
Summary|EMBARGOED slf4j: |slf4j: Deserialisation
|Deserialisation |vulnerability in EventData
|vulnerability in EventData |constructor can allow for
|constructor can allow for |arbitrary code execution
|arbitrary code execution |
Whiteboard|impact=important,reported=2 |impact=important,public=201
|0180226,source=researcher,c |80222,reported=20180226,sou
|vss3=8.1/CVSS:3.0/AV:N/AC:H |rce=researcher,cvss3=8.1/CV
|/PR:N/UI:N/S:U/C:H/I:H/A:H, |SS:3.0/AV:N/AC:H/PR:N/UI:N/
|cwe=CWE-502,fedora-all/slf4 |S:U/C:H/I:H/A:H,cwe=CWE-502
|j=affected,fedora-all/slf4j |,fedora-all/slf4j=affected,
|-jboss-logmanager=affected, |fedora-all/slf4j-jboss-logm
|openshift-1/slf4j=affected, |anager=affected,openshift-1
|rhscl-3/rh-java-common-slf4 |/slf4j=affected,rhscl-3/rh-
|j=new,sam-1/slf4j=wontfix,j |java-common-slf4j=new,sam-1
|ws-3/slf4j=new,brms-5/slf4j |/slf4j=wontfix,jws-3/slf4j=
|=new,brms-6/slf4j=new,amq-6 |new,brms-5/slf4j=new,brms-6
|/slf4j=new,soap-5/slf4j=new |/slf4j=new,amq-6/slf4j=new,
|,eap-5/slf4j=new,eap-6/slf4 |soap-5/slf4j=new,eap-5/slf4
|j=new,eap-7/slf4j=new,jbds- |j=new,eap-6/slf4j=new,eap-7
|11/slf4j=new,jdg-6/slf4j=ne |/slf4j=new,jbds-11/slf4j=ne
|w,jdg-7/slf4j=new,jdv-6/slf |w,jdg-6/slf4j=new,jdg-7/slf
|4j=new,fsw-6/slf4j=new,fuse |4j=new,jdv-6/slf4j=new,fsw-
|-6/slf4j=new,jon-3/slf4j=ne |6/slf4j=new,fuse-6/slf4j=ne
|w,jpp-6/slf4j=new,rhsso-7/s |w,jon-3/slf4j=new,jpp-6/slf
|lf4j=new,rhn_satellite_6/sp |4j=new,rhsso-7/slf4j=new,rh
|acewalk-slf4j=affected,rhn_ |n_satellite_6/spacewalk-slf
|satellite_6/slf4j=affected, |4j=affected,rhn_satellite_6
|rhel-6/slf4j=new,rhel-7/slf |/slf4j=affected,rhel-6/slf4
|4j=new,rhel-8/slf4j=new,rhe |j=new,rhel-7/slf4j=new,rhel
|v-m-4/jboss=new,vertx-3/slf |-8/slf4j=new,rhev-m-4/jboss
|4j=new,openstack-8/slf4j-ap |=new,vertx-3/slf4j=new,open
|i=new,openstack-9/slf4j-api |stack-8/slf4j-api=new,opens
|=new,openstack-10/slf4j-api |tack-9/slf4j-api=new,openst
|=new,openstack-11/slf4j-api |ack-10/slf4j-api=new,openst
|=new,openstack-12/slf4j-api |ack-11/slf4j-api=new,openst
|=new,openstack-13/slf4j-api |ack-12/slf4j-api=new,openst
|=new |ack-13/slf4j-api=new
--
You are receiving this mail because:
You are on the CC list for the bug.