CVE-2016-3106

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...

CVE-2013-7450

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...

Design/Logic Flaw

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...

CVE-2013-7450

CVE-2013-7450 affects Pulp versions before 2.3.0. The root cause is that the same CA key and certificate are used across all installations, creating a single trusted-trust anchor per deployment. Reported impact includes potential modification of the CA certificate, undermining PKI trust. Exploita...

CVE-2013-7450

Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations...

Fedora Update for pulp-ostree FEDORA-2016-4373f7d32a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pulp-python FEDORA-2016-4373f7d32a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pulp-docker FEDORA-2016-4373f7d32a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pulp-puppet FEDORA-2016-4373f7d32a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for pulp FEDORA-2016-4373f7d32a

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 24 : pulp / pulp-docker / pulp-ostree / pulp-puppet / pulp-python / etc (2016-4373f7d32a)

2.8.6 is a security and bugfix release. Included in the list of fixed issues in 2.8.5 are two CVEs : - CVE-2016-3696: Leakage of CA key in pulp-qpid-ssl-cfg - CVE-2016-3704: Unsafe use of bash $RANDOM for NSS DB password and seed Several issues with database migrations are also addressed in this...

[SECURITY] Fedora 24 Update: pulp-python-1.1.2-1.fc24

Provides a collection of platform plugins and client extensions support for Python packages...

[SECURITY] Fedora 24 Update: pulp-rpm-2.8.6-2.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide RPM support...

[SECURITY] Fedora 24 Update: pulp-puppet-2.8.6-2.fc24

Provides a collection of platform plugins, client extensions and agent handlers that provide Puppet support...

[SECURITY] Fedora 24 Update: pulp-docker-2.0.2-1.fc24

Provides a collection of Pulp server plugins and admin client extensions to support Docker content...

[SECURITY] Fedora 24 Update: pulp-ostree-1.1.2-1.fc24

Provides a collection of platform plugins and client extensions support for OSTree content...

[SECURITY] Fedora 24 Update: pulp-2.8.6-1.fc24

Pulp provides replication, access, and accounting for software repositories...

pulp: Insecure temporary file used when generating certificate for Pulp Nodes

It was found that the private key for the node certificate was contained in a world-readable temporary file. A local user could possibly use this flaw to gain access to the private key information in the temporary file...

Pulp Information Disclosure Vulnerability (CNVD-2016-05111)

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A local information disclosure vulnerability exists in Pulp that stems from the program creating certificate files and database files that are stored...

Pulp has an unspecified vulnerability

Pulp is a free and open source repository platform for managing content. A security vulnerability exists in Pulp that allows a local attacker to bypass security restrictions and perform unauthorized operations...