Bug#891928: CVE-2018-1048: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser

Link to patch: https://github.com/undertow-io/undertow/commit/1bc0c275aadf5835abfbd3835d5d78095c2f1cf5 signature.asc Description: OpenPGP digital signature __ This is the maintainer address of Debian's Java team .

Bug#891928: CVE-2018-1048: ALLOW_ENCODED_SLASH option not taken into account in the AjpRequestParser

Source: undertow Version: 1.4.8-1+deb9u1 Severity: grave Tags: security Forwarded: https://issues.jboss.org/browse/UNDERTOW-1245 It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash

Bug#879001: marked as done (CVE-2017-12197: libpam4j: Account check bypass)

Your message dated Sat, 18 Nov 2017 22:19:23 + with message-id <e1egbsn-0005xu...@fasolo.debian.org> and subject line Bug#879001: fixed in libpam4j 1.4-2+deb8u1 has caused the Debian Bug report #879001, regarding CVE-2017-12197: libpam4j: Account check bypass to be marked as done. This

Bug#879001: marked as done (CVE-2017-12197: libpam4j: Account check bypass)

Your message dated Sun, 12 Nov 2017 15:33:08 + with message-id <e1edufw-000fbd...@fasolo.debian.org> and subject line Bug#879001: fixed in libpam4j 1.4-2+deb9u1 has caused the Debian Bug report #879001, regarding CVE-2017-12197: libpam4j: Account check bypass to be marked as done. This

Bug#879001: marked as done (CVE-2017-12197: libpam4j: Account check bypass)

Your message dated Tue, 07 Nov 2017 13:19:54 + with message-id <e1ec3ng-000fjq...@fasolo.debian.org> and subject line Bug#879001: fixed in libpam4j 1.4-3 has caused the Debian Bug report #879001, regarding CVE-2017-12197: libpam4j: Account check bypass to be marked as done. This

[java-wrappers] 42/61: [java-wrappers] Really fix the architecture dependence of openjdk-6 + take openjdk7 into account as well

appers] Really fix the architecture dependence of openjdk-6 + take openjdk7 into account as well --- debian/changelog | 8 jvm-list.sh | 8 +--- 2 files changed, 13 insertions(+), 3 deletions(-) diff --git a/debian/changelog b/debian/changelog index 01526b5..f520d10 100644 --- a/

Bug#879001: CVE-2017-12197: libpam4j: Account check bypass

Source: libpam4j Version: 1.4-2 Severity: grave Tags: security Hi, the following vulnerability was published for libpam4j. CVE-2017-12197[0]: libpam4j: Account check bypass PAM.authentication() does not call pam_acct_mgmt(). As a consequence, the PAM account is not properly verified. Any user

Bug#868693: maven-repo-helper: POMReader does not take account of debian/maven.properties

=wxyz to debian/maven.properties. However, POMReader expands properties in dependencies before applying the rules. This expansion appears not to take account of properties specified in debian/maven.properties. (See also Bug #823875 for another issue where properties in dependencies do not behave

Bug#785720: marked as done (sikuli exec wrapper classpath doesn't account for transitional constants lib)

Your message dated Sat, 23 May 2015 09:51:28 + with message-id e1yw65y-0001un...@franck.debian.org and subject line Bug#785720: fixed in sikuli 1.0~x~rc3.tesseract3-dfsg1-9 has caused the Debian Bug report #785720, regarding sikuli exec wrapper classpath doesn't account for transitional

Bug#785720: sikuli exec wrapper classpath doesn't account for transitional constants lib

Package: sikuli Version: 1.0~x~rc3.tesseract3-dfsg1-8 The execution wrapper has a classpath defined, but in some places the constants libconstantine-java transitional library in Depends is a empty transitional package to libjnr-constants-java . That makes sikuli fail at startup. $ sikuli-ide

westernunion: Account Locked

- This email was sent automatically by Western Union - Your account has been locked due to inactivity on 20 November 2012. In order to unlock your account, please login and confirm your information on file with us now. Please visit our website by clicking here NOTE: If you do

westernunion: Account Locked

- This email was sent automatically by Western Union - Your account has been locked due to inactivity on 20 November 2012. In order to unlock your account, please login and confirm your information on file with us now. Please visit our website by clicking here NOTE: If you do

Terakhir pemberitahuan untuk mengamankan account Anda

Pelanggan Terhormat.Perlu diketahui bahwa account Anda dalam file daftar hitam kami karena salah satu alasan berikut di bawah:1. Anda login ke account Anda dari IP yang blacklist2. Terlalu banyak internet sesi3. Terlalu banyak login yang salahSistem kami secara otomatis akan menutup account

Bug#623242: context xml file not taken into account, only web.xml is used

Package: tomcat6 Version: 6.0.32 Hi, when I put a context file in /etc/tomcat6/Catalina/localhost (such as myapp.xml), the context param values are not taken into account. This used to work on previous tests on an older update. To be sure, I took a Tomcat 6.0.24 version (not packaged

Bug#623242: marked as done (context xml file not taken into account, only web.xml is used)

Your message dated Tue, 19 Apr 2011 05:03:49 + with message-id e1qc36l-0006ms...@franck.debian.org and subject line Bug#623242: fixed in tomcat6 6.0.32-3 has caused the Debian Bug report #623242, regarding context xml file not taken into account, only web.xml is used to be marked as done

Bug#403675: Sehr geehrte uni-wuppertal.de Account Benutzer

Sehr geehrte uni-wuppertal.de Account Benutzer, Es wird eine allgemeine Aktualisierung in unserem System zwischen 7. bis 29. August 2009.Durch die anonyme Registrierung von uni-wuppertal.de und die Zahl der ruhende Konten, werden wir mit diesem Upgrade, um die genaue Anzahl der Teilnehmer haben

Attention email account Owner,

Attention email account Owner, We contacted yesterday to reconfirm your account information to avoid loss of your account detail. We hereby bring to your notice once again that the details of this email account are already deleted from our database and in a short time, your email account may

Please restore your account !

___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http://lists.alioth.debian.org/mailman/listinfo/pkg-java-maintainers

Attn:Email Account Owner

Accu-Online!!! Ticket no. 4 16 19 25 27 40, Batch no;SPYU6868, Do Contact; Mr.Mark Mejia for Clarification and Claim of 800,000.00 Euro you won in Accu-Online. Accu-Online Claims Office Contact:Dr.Mark Mejia Tel:+34-685-279-789 E-Mail:accuclaimonl...@sify.com Regards, Ms.Maria Alan

Your Account Expires Within 48 Hours!

in the bracket with the Exact User name and Password, your domain name will also be required. If you are the rightful owner of this account, Our message center will confirm your identity including the secret question and answer immediately and We apologize for the inconvenience this may cause

Account

I should ask on this list ... My Alioth account is janpascal-guest Cheers, Jan-Pascal signature.asc Description: OpenPGP digital signature ___ pkg-java-maintainers mailing list pkg-java-maintainers@lists.alioth.debian.org http

Re: Account

on Alioth. I would like to have access to the pkg-java svn repository to do this and the java.debian.net site says I should ask on this list ... My Alioth account is janpascal-guest Cheers, Jan-Pascal ___ pkg-java-maintainers mailing list pkg