Back to bug 1325930

Who When What Removed Added
Adam Mariš 2016-04-11 12:41:55 UTC CC security-response-team
Red Hat Bugzilla 2016-04-11 12:41:55 UTC Doc Type --- Bug Fix
Adam Mariš 2016-04-11 13:08:46 UTC Blocks 1325942
Adam Mariš 2016-04-12 14:19:44 UTC CC jcline, rbarlow
Randy Barlow 2016-04-12 14:27:13 UTC CC sean.myers
Randy Barlow 2016-04-12 14:28:46 UTC Attachment #1145987 Attachment is obsolete 0 1
CC amaris
Attachment #1146471 Flags review?(amaris)
Kurt Seifried 2016-04-13 16:50:03 UTC Whiteboard impact=moderate,public=no,reported=20160408,source=redhat,cvss2=2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N,cwe=CWE-732,rhn_satellite_6/pulp=new,rhui-2/pulp=new impact=moderate,public=20160413,reported=20160408,source=redhat,cvss2=2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N,cwe=CWE-732,rhn_satellite_6/pulp=new,rhui-2/pulp=new
Kurt Seifried 2016-04-13 16:50:18 UTC Summary EMBARGOED CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file CVE-2016-3107 pulp: Node certificate containing private key stored in world-readable file
Kurt Seifried 2016-04-13 16:50:21 UTC Group security, qe_staff
Kurt Seifried 2016-04-13 18:31:39 UTC Whiteboard impact=moderate,public=20160413,reported=20160408,source=redhat,cvss2=2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N,cwe=CWE-732,rhn_satellite_6/pulp=new,rhui-2/pulp=new impact=moderate,public=20160413,reported=20160408,source=redhat,cvss2=2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N,cwe=CWE-732,rhn_satellite_6/pulp=affected,rhui-2/pulp=wontfix
Kurt Seifried 2016-04-13 18:35:06 UTC Depends On 1326913
Kurt Seifried 2016-04-13 18:36:15 UTC Depends On 1326919
Dennis Kliban 2016-04-13 19:53:38 UTC CC dkliban
Link ID Pulp Redmine 1842
pulp-infra 2016-04-13 19:57:06 UTC CC mhrivnak
pulp-infra 2016-04-13 19:57:09 UTC CC bbouters
Kurt Seifried 2016-05-05 20:31:47 UTC CC jmatthew, tsanders
Kurt Seifried 2016-09-19 18:55:50 UTC Doc Text It was found that the private key for the node certificate was contained in a world-readable file. A local user could possibly use this flaw to gain access to the private key information in the file.
Kurt Seifried 2016-09-19 19:02:37 UTC Status NEW CLOSED
Resolution --- ERRATA
Last Closed 2016-09-19 15:02:37 UTC
Adam Mariš 2016-11-08 15:51:01 UTC CC amaris
Adam Mariš 2017-01-05 11:15:18 UTC Attachment #1146471 Flags review?(amaris)
pulp-infra 2017-06-05 18:22:00 UTC CC pcreech
pulp-infra 2017-06-05 18:22:05 UTC CC ttereshc
Brian Bouterse 2017-07-26 20:00:30 UTC CC bbouters
pulp-infra 2018-05-25 15:21:35 UTC CC rchan
pulp-infra 2018-09-19 15:16:28 UTC CC daviddavis
Product Security DevOps Team 2019-09-29 13:46:44 UTC Whiteboard impact=moderate,public=20160413,reported=20160408,source=redhat,cvss2=2.1/AV:L/AC:L/Au:N/C:P/I:N/A:N,cwe=CWE-732,rhn_satellite_6/pulp=affected,rhui-2/pulp=wontfix
pulp-infra 2020-10-05 14:27:39 UTC CC bmbouter
pulp-infra 2020-10-05 14:27:40 UTC CC ipanova
pulp-infra 2021-04-06 17:58:56 UTC CC ggainey

Back to bug 1325930