Fedora 40 : koji (2024-7ee01adadc)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7ee01adadc advisory. Update to 1.35.1. Includes fix for CVE-2024-9427 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora: Security Advisory (FEDORA-2024-7ee01adadc)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

koji hub allows arbitrary upload destinations

The way that the hub code validates upload paths allows for an attacker to choose an arbitrary destination for the uploaded file. Uploading still requires login. However, an attacker with credentials could damage the integrity of the Koji system. Workaround There is no known workaround. All Koji...

GHSA-7498-C9FM-G64P koji hub allows arbitrary upload destinations

The way that the hub code validates upload paths allows for an attacker to choose an arbitrary destination for the uploaded file. Uploading still requires login. However, an attacker with credentials could damage the integrity of the Koji system. Workaround There is no known workaround. All Koji...

GHSA-3QF7-9XHJ-QCFJ Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins Koji Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. As of publication of this advisory, there is no fix...

Jenkins Koji Plugin globally and unconditionally disables SSL/TLS certificate validation

Jenkins Koji Plugin unconditionally disables SSL/TLS certificate validation for the entire Jenkins controller JVM. As of publication of this advisory, there is no fix...

GHSA-VWP5-W4RQ-G4CC Koji blacklisted paths workaround

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission...

Koji blacklisted paths workaround

Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission...

GHSA-X464-R7F4-GJ3M Jenkins Koji Plugin stores credentials in plain text

Jenkins Koji Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.koji.KojiBuilder.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

Jenkins Koji Plugin stores credentials in plain text

Jenkins Koji Plugin stores credentials unencrypted in its global configuration file org.jenkinsci.plugins.koji.KojiBuilder.xml on the Jenkins controller. These credentials can be viewed by users with access to the Jenkins controller file system...

Mageia: Security Advisory (MGASA-2021-0147)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0144)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

koji-ogawa.com Cross Site Scripting vulnerability OBB-2324996

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MGASA-2021-0147 Updated koji packages fix security vulnerability

Koji through 1.17.0 allows remote Directory Traversal, with resulting Privilege Escalation...

Updated koji packages fix security vulnerability

Koji through 1.17.0 allows remote Directory Traversal, with resulting Privilege Escalation...

Fedora Update for koji FEDORA-2019-caff41caf8

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for koji FEDORA-2019-bf8b97d604

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: koji-1.19.1-1.fc29

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

Fedora 29 : koji (2019-bf8b97d604)

Update to 1.19.1 bugfix release. ---- Upstream bugfix release 1.19.0. See https://docs.pagure.org/koji/releasenotes1.19/ for more info Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to...

Fedora 31 : koji (2019-caff41caf8)

Rebase to Koji 1.18.1 for CVE-2019-17109 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable...