[Bug 1948752] New: CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
3:37 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Bug ID: 1948752
Summary: CVE-2021-29425 apache-commons-io: Limited path
traversal in Apache Commons IO 2.2 to 2.6
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: decathorpe(a)gmail.com, hhorak(a)redhat.com,
java-maint(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jorton(a)redhat.com, kaycoth(a)redhat.com,
mizdebsk(a)redhat.com, qe-baseos-apps(a)redhat.com,
rhcs-maint(a)redhat.com, sgehwolf(a)redhat.com,
SpikeFedora(a)gmail.com, stuart(a)gathman.org
Target Milestone: ---
Classification: Other
In Apache Commons IO before 2.7, When invoking the method
FileNameUtils.normalize with an improper input string, like
"//../foo", or "\\..\foo", the result would be the same value, thus
possibly providing access to files in the parent directory, but not
further above (thus "limited" path traversal), if the calling code
would use the result to construct a path value.
References:
https://www.openwall.com/lists/oss-security/2021/04/12/1
https://issues.apache.org/jira/browse/IO-556
--
You are receiving this mail because:
You are on the CC list for the bug.
3:37 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Pedro Sampaio <psampaio(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1948753
--
You are receiving this mail because:
You are on the CC list for the bug.
2:08 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Paramvir jindal <pjindal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |aboyko(a)redhat.com,
| |aileenc(a)redhat.com,
| |akoufoud(a)redhat.com,
| |alazarot(a)redhat.com,
| |almorale(a)redhat.com,
| |anstephe(a)redhat.com,
| |asoldano(a)redhat.com,
| |atangrin(a)redhat.com,
| |ataylor(a)redhat.com,
| |avibelli(a)redhat.com,
| |bbaranow(a)redhat.com,
| |bgeorges(a)redhat.com,
| |bmaxwell(a)redhat.com,
| |brian.stansberry(a)redhat.com
| |, cdewolf(a)redhat.com,
| |chazlett(a)redhat.com,
| |clement.escoffier(a)redhat.co
| |m, dandread(a)redhat.com,
| |darran.lofthouse(a)redhat.com
| |, dkreling(a)redhat.com,
| |dosoudil(a)redhat.com,
| |drieden(a)redhat.com,
| |eleandro(a)redhat.com,
| |etirelli(a)redhat.com,
| |fjuma(a)redhat.com,
| |ggaughan(a)redhat.com,
| |gmalinko(a)redhat.com,
| |gsmet(a)redhat.com,
| |gvarsami(a)redhat.com,
| |hamadhan(a)redhat.com,
| |ibek(a)redhat.com,
| |iweiss(a)redhat.com,
| |janstey(a)redhat.com,
| |jcoleman(a)redhat.com,
| |jochrist(a)redhat.com,
| |jolee(a)redhat.com,
| |jpallich(a)redhat.com,
| |jperkins(a)redhat.com,
| |jross(a)redhat.com,
| |jschatte(a)redhat.com,
| |jstastny(a)redhat.com,
| |jwon(a)redhat.com,
| |kconner(a)redhat.com,
| |krathod(a)redhat.com,
| |kverlaen(a)redhat.com,
| |kwills(a)redhat.com,
| |ldimaggi(a)redhat.com,
| |lgao(a)redhat.com,
| |loleary(a)redhat.com,
| |lthon(a)redhat.com,
| |mnovotny(a)redhat.com,
| |msochure(a)redhat.com,
| |msvehla(a)redhat.com,
| |mszynkie(a)redhat.com,
| |nwallace(a)redhat.com,
| |pdrozd(a)redhat.com,
| |peholase(a)redhat.com,
| |pgallagh(a)redhat.com,
| |pjindal(a)redhat.com,
| |pmackay(a)redhat.com,
| |probinso(a)redhat.com,
| |rguimara(a)redhat.com,
| |rrajasek(a)redhat.com,
| |rruss(a)redhat.com,
| |rstancel(a)redhat.com,
| |rsvoboda(a)redhat.com,
| |rwagner(a)redhat.com,
| |sbiarozk(a)redhat.com,
| |sdouglas(a)redhat.com,
| |smaestri(a)redhat.com,
| |spinder(a)redhat.com,
| |sthorger(a)redhat.com,
| |tcunning(a)redhat.com,
| |theute(a)redhat.com,
| |tkirby(a)redhat.com,
| |tom.jenkinson(a)redhat.com,
| |tzimanyi(a)redhat.com,
| |yborgess(a)redhat.com
--- Comment #1 from Paramvir jindal <pjindal(a)redhat.com> ---
Adding MW affects.
--
You are receiving this mail because:
You are on the CC list for the bug.
2:10 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Paramvir jindal <pjindal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Blocks| |1929333
--
You are receiving this mail because:
You are on the CC list for the bug.
10 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Paramvir jindal <pjindal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags| |needinfo?(krathod(a)redhat.co
| |m)
--
You are receiving this mail because:
You are on the CC list for the bug.
12:55 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Kunjan Rathod <krathod(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Flags|needinfo?(krathod(a)redhat.co |
|m) |
--
You are receiving this mail because:
You are on the CC list for the bug.
10:19 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed In Version| |apache-commons-io 2.7
--
You are receiving this mail because:
You are on the CC list for the bug.
10:27 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Doran Moppert <dmoppert(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1954900, 1954902, 1954901,
| |1954899, 1954898
--
You are receiving this mail because:
You are on the CC list for the bug.
10:29 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Chess Hazlett <chazlett(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |swoodman(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
2:26 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
lnacshon(a)redhat.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Depends On| |1969298
--
You are receiving this mail because:
You are on the CC list for the bug.
1:29 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #21 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Vert.x 4.1.0
Via RHSA-2021:2465 https://access.redhat.com/errata/RHSA-2021:2465
--
You are receiving this mail because:
You are on the CC list for the bug.
1:29 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:2465
--
You are receiving this mail because:
You are on the CC list for the bug.
5:40 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
Product Security DevOps Team <prodsec-dev(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |ERRATA
Last Closed| |2021-07-07 10:40:19
--- Comment #22 from Product Security DevOps Team <prodsec-dev(a)redhat.com> ---
This bug is now closed. Further updates for individual products will be
reflected on the CVE page(s):
https://access.redhat.com/security/cve/cve-2021-29425
--
You are receiving this mail because:
You are on the CC list for the bug.
2:18 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #23 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat AMQ Streams 1.8.0
Via RHSA-2021:3225 https://access.redhat.com/errata/RHSA-2021:3225
--
You are receiving this mail because:
You are on the CC list for the bug.
2:18 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3225
--
You are receiving this mail because:
You are on the CC list for the bug.
8:06 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #24 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
EAP 7.3.9 release
Via RHSA-2021:3471 https://access.redhat.com/errata/RHSA-2021:3471
--
You are receiving this mail because:
You are on the CC list for the bug.
8:06 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3471
--
You are receiving this mail because:
You are on the CC list for the bug.
9:04 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #25 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8
Via RHSA-2021:3468 https://access.redhat.com/errata/RHSA-2021:3468
--
You are receiving this mail because:
You are on the CC list for the bug.
9:04 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3468
--
You are receiving this mail because:
You are on the CC list for the bug.
9:06 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #26 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6
Via RHSA-2021:3466 https://access.redhat.com/errata/RHSA-2021:3466
--
You are receiving this mail because:
You are on the CC list for the bug.
9:06 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3466
--
You are receiving this mail because:
You are on the CC list for the bug.
9:09 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #27 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7
Via RHSA-2021:3467 https://access.redhat.com/errata/RHSA-2021:3467
--
You are receiving this mail because:
You are on the CC list for the bug.
9:09 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3467
--
You are receiving this mail because:
You are on the CC list for the bug.
12:34 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #28 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat EAP-XP 2.0.0 via EAP 7.3.x base
Via RHSA-2021:3516 https://access.redhat.com/errata/RHSA-2021:3516
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
12:34 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3516
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
7:37 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #29 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat Single Sign-On 7.4.9
Via RHSA-2021:3534 https://access.redhat.com/errata/RHSA-2021:3534
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
7:37 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3534
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:15 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #30 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
Via RHSA-2021:3656 https://access.redhat.com/errata/RHSA-2021:3656
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:15 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3656
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:24 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #31 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
Via RHSA-2021:3658 https://access.redhat.com/errata/RHSA-2021:3658
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:24 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3658
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:29 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #32 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
EAP 7.4.1 release
Via RHSA-2021:3660 https://access.redhat.com/errata/RHSA-2021:3660
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
11:29 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3660
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
4:58 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #33 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat AMQ 7.9.0
Via RHSA-2021:3700 https://access.redhat.com/errata/RHSA-2021:3700
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
4:58 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:3700
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
3:35 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #36 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
Red Hat Fuse 7.10
Via RHSA-2021:5134 https://access.redhat.com/errata/RHSA-2021:5134
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
3:35 p.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2021:5134
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
8 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #37 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
RHPAM 7.12.1
Via RHSA-2022:1108 https://access.redhat.com/errata/RHSA-2022:1108
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
8 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2022:1108
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
8:16 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
--- Comment #38 from errata-xmlrpc <errata-xmlrpc(a)redhat.com> ---
This issue has been addressed in the following products:
RHDM 7.12.1
Via RHSA-2022:1110 https://access.redhat.com/errata/RHSA-2022:1110
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
8:16 a.m.
New subject: [Bug 1948752] CVE-2021-29425 apache-commons-io: Limited path traversal in Apache Commons IO 2.2 to 2.6
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
errata-xmlrpc <errata-xmlrpc(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Link ID| |Red Hat Product Errata
| |RHSA-2022:1110
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1948752
809
days inactive
1160
days old
java-sig-commits@lists.fedoraproject.org
40 comments
1 participants
participants (1)
-
bugzilla＠redhat.com