java-sig-commits April 2020

java-sig-commits@lists.fedoraproject.org

1 participants
402 discussions

[Bug 1595620] CVE-2017-7657 jetty: HTTP request smuggling
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1595620 Chess Hazlett <chazlett(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|medium |high Severity|medium |high -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1595639] CVE-2017-7656 jetty: HTTP request smuggling using the range header
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1595639 Chess Hazlett <chazlett(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|medium |high Severity|medium |high -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1815470] CVE-2020-10673 jackson-databind: mishandles the interaction between serialization gadgets and typing which could result in remote command execution
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1815470 Mauro Matteo Cascella <mcascell(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Comment|2 |updated --- Comment #2 has been edited --- External References: https://github.com/FasterXML/jackson-databind/issues/2660 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1819212] New: CVE-2020-10969 jackson-databind: serialization gadgets in javax.swing
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1819212 Bug ID: 1819212 Summary: CVE-2020-10969 jackson-databind: serialization gadgets in javax.swing Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: aboyko(a)redhat.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, aos-bugs(a)redhat.com, asoldano(a)redhat.com, atangrin(a)redhat.com, ataylor(a)redhat.com, avibelli(a)redhat.com, bbaranow(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bgeorges(a)redhat.com, bkearney(a)redhat.com, bmaxwell(a)redhat.com, bmontgom(a)redhat.com, brian.stansberry(a)redhat.com, btotty(a)redhat.com, cbyrne(a)redhat.com, cdewolf(a)redhat.com, chazlett(a)redhat.com, cmacedo(a)redhat.com, darran.lofthouse(a)redhat.com, dbecker(a)redhat.com, decathorpe(a)gmail.com, dffrench(a)redhat.com, dkreling(a)redhat.com, dosoudil(a)redhat.com, drieden(a)redhat.com, drusso(a)redhat.com, eparis(a)redhat.com, etirelli(a)redhat.com, ganandan(a)redhat.com, ggaughan(a)redhat.com, gmalinko(a)redhat.com, hhorak(a)redhat.com, hhudgeon(a)redhat.com, ibek(a)redhat.com, iweiss(a)redhat.com, janstey(a)redhat.com, java-maint(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jawilson(a)redhat.com, jbalunas(a)redhat.com, jburrell(a)redhat.com, jcantril(a)redhat.com, jjoyce(a)redhat.com, jmadigan(a)redhat.com, jochrist(a)redhat.com, jokerman(a)redhat.com, jorton(a)redhat.com, jpallich(a)redhat.com, jperkins(a)redhat.com, jschluet(a)redhat.com, jshepherd(a)redhat.com, jstastny(a)redhat.com, jwon(a)redhat.com, kbasil(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, kwills(a)redhat.com, lef(a)fedoraproject.org, lgao(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com, lthon(a)redhat.com, lzap(a)redhat.com, mburns(a)redhat.com, mkolesni(a)redhat.com, mmccune(a)redhat.com, mnovotny(a)redhat.com, msochure(a)redhat.com, msvehla(a)redhat.com, mszynkie(a)redhat.com, ngough(a)redhat.com, nmoumoul(a)redhat.com, nstielau(a)redhat.com, nwallace(a)redhat.com, paradhya(a)redhat.com, pdrozd(a)redhat.com, pgallagh(a)redhat.com, pjindal(a)redhat.com, pmackay(a)redhat.com, psotirop(a)redhat.com, puntogil(a)libero.it, pwright(a)redhat.com, rchan(a)redhat.com, rguimara(a)redhat.com, rhcs-maint(a)redhat.com, rjerrido(a)redhat.com, rrajasek(a)redhat.com, rruss(a)redhat.com, rstancel(a)redhat.com, rsvoboda(a)redhat.com, rsynek(a)redhat.com, sclewis(a)redhat.com, scohen(a)redhat.com, sdaley(a)redhat.com, slinaber(a)redhat.com, smaestri(a)redhat.com, sokeeffe(a)redhat.com, sponnaga(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org, sthorger(a)redhat.com, swoodman(a)redhat.com, tbrisker(a)redhat.com, tom.jenkinson(a)redhat.com, trepel(a)redhat.com Target Milestone: --- Classification: Other FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane. Reference: https://github.com/FasterXML/jackson-databind/issues/2642 -- You are receiving this mail because: You are on the CC list for the bug.

1 16

[Bug 1730462] CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1730462 --- Doc Text *updated* by RaTasha Tillery-Smith <rtillery(a)redhat.com> --- A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1824088] New: gradle package missing
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1824088 Bug ID: 1824088 Summary: gradle package missing Product: Fedora Version: 31 Status: NEW Component: gradle Assignee: extras-orphan(a)fedoraproject.org Reporter: andreas.buesching(a)posteo.de QA Contact: extras-qa(a)fedoraproject.org CC: dan(a)danieljamesscott.org, decathorpe(a)gmail.com, extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jjelen(a)redhat.com, lkundrak(a)v3.sk, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: The package gradle can not be found anymore Version-Release number of selected component (if applicable): any version How reproducible: sudo dnf search gradle Steps to Reproduce: 1. search for the package gradle Actual results: The package is not found Expected results: the package is found Additional info: According to the buildsystem it seems that the last build has failed. I'm not sure if this is somehow related. https://apps.fedoraproject.org/packages/gradle/builds/ -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1730462] CVE-2020-1695 resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
by bugzilla＠redhat.com 15 Apr '20

15 Apr '20

1 0

[Bug 1806398] CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
by bugzilla＠redhat.com 14 Apr '20

14 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1806398 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2020:1478 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1806398] CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
by bugzilla＠redhat.com 14 Apr '20

14 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1806398 --- Comment #122 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> --- This issue has been addressed in the following products: Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 7 Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 6 Red Hat JBoss Enterprise Application Platform 6.4 for RHEL 5 Via RHSA-2020:1478 https://access.redhat.com/errata/RHSA-2020:1478 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1806398] CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
by bugzilla＠redhat.com 14 Apr '20

14 Apr '20

https://bugzilla.redhat.com/show_bug.cgi?id=1806398 errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Link ID| |Red Hat Product Errata | |RHSA-2020:1479 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

← Newer
1
...
33
34
35
36
37
38
39
40
41
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits April 2020