Bug 1594389 – [GSS](6.4.z) The fix for CVE-2017-2582 breaks the feature of attribute replacement with system property in picketlink.xml

Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.

Bug 1594389 - [GSS](6.4.z) The fix for CVE-2017-2582 breaks the feature of attribute replacement with system property in picketlink.xml

Summary:	[GSS](6.4.z) The fix for CVE-2017-2582 breaks the feature of attribute replac...

Status:	CLOSED ERRATA

Aliases:	None

Product:	JBoss Enterprise Application Platform 6
Classification:	JBoss
Component:	Security (Show other bugs)
Sub Component:
Version:	6.4.19
Hardware:	Unspecified Unspecified

Priority	unspecified Severity unspecified
Target Milestone:	CR1
Target Release:	EAP 6.4.21
Assigned To:	Jiri Ondrusek
QA Contact:	Peter Mackay
Docs Contact:

URL:
Whiteboard:
Keywords:	Regression

Duplicates:	1611832 (view as bug list)
Depends On:	1414138 1509183
Blocks:	eap6421-payload 1611832 1615347
	Show dependency tree / graph

Reported:	2018-06-22 15:47 EDT by dhorton
Modified:	2018-09-24 17:49 EDT (History)
CC List:	11 users (show)

See Also:
Fixed In Version:
Doc Type:	If docs needed, set a value
Doc Text:
Story Points:	---
Clone Of:	1509183
Clones:	1611832 (view as bug list)
Environment:
Last Closed:	2018-09-24 17:47:14 EDT
Type:	Bug
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

External Trackers
Tracker	ID	Priority	Status	Summary	Last Updated
JBoss Issue Tracker	JBEAP-14929	Major	Verified	[GSS](7.1.z) (picketlink) The fix for CVE-2017-2582 breaks the feature of attribute replacement with system property in ...	2018-10-31 08:27 EDT
Red Hat Product Errata	RHSA-2018:2740	None	None	None	2018-09-24 17:49 EDT

Groups: None (edit)

Comment 2 dhorton 2018-08-02 16:56:10 EDT

*** Bug 1611832 has been marked as a duplicate of this bug. ***

Comment 5 errata-xmlrpc 2018-09-24 17:47:14 EDT

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2018:2740

Note You need to log in before you can comment on or make changes to this bug.