EUVD-2017-0057

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-1000001

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on. CVE-2017-1000001 No...

GHSA-P7XC-35M8-57PR FedMsg not properly completing message validation

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

FedMsg not properly completing message validation

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

Missing Message Validation

fedmsg is missing message validation. The library contains a bug where the base class' default value does not enable signature validation...

CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

Input validation

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

UBUNTU-CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

PYSEC-2017-13

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

CVE-2017-1000001: Improper Input Validation

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

Red Hat FedMsg Input Validation Vulnerability

Red Hat FedMsg is a Python package from Red Hat that is used to send messages to and receive messages from applications. A security vulnerability exists in Red Hat FedMsg 0.18.1 and earlier versions. An attacker could exploit this vulnerability to cause message detection to fail to start...

CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

CVE-2017-1000001

FedMsg 0.18.1 and older is vulnerable to a message validation flaw resulting in message validation not being enabled if configured to be on...

CVE-2017-1000001

CVE-2017-1000001 affects FedMsg 0.18.1 and earlier, where a message validation flaw can occur if validation is configured to run but is not enabled. Affected component: FedMsg (Python package for messaging). Root cause: message validation may not be enabled as configured, enabling potential bypas...

PT-2017-10712

Name of the Vulnerable Software and Affected Versions FedMsg versions 0.18.1 and older Description The issue is related to a message validation flaw. This flaw results in message validation not being enabled even when it is configured to be on. Recommendations For FedMsg versions 0.18.1 and older...

Fedora 24 : fedmsg (2017-a73bc7ac5d)

Fix validation logic in the base consumer The base consumer is intended to only derive its validation switch from the on-disk configuration if the child class doesn't override the validatesignatures switch. There was a bug here where the default value provided in the base class made it appear as ...

Fedora Update for fedmsg FEDORA-2017-a73bc7ac5d

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : fedmsg (2017-fff6e1af37)

Fix validation logic in the base consumer The base consumer is intended to only derive its validation switch from the on-disk configuration if the child class doesn't override the validatesignatures switch. There was a bug here where the default value provided in the base class made it appear as ...