Actions
Bug #26571
closed
CVE-2019-3845 - Add ACLs around Qpid QMF
Status:
Closed
Priority:
High
Assignee:
Category:
Foreman modules
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Pull request:
https://github.com/theforeman/puppet-qpid/pull/120, https://github.com/theforeman/puppet-katello/pull/283, https://github.com/theforeman/puppet-foreman_proxy_content/pull/197, https://github.com/theforeman/foreman-installer/pull/341, https://github.com/theforeman/puppet-katello/pull/285, https://github.com/theforeman/puppet-foreman_proxy_content/pull/201
Updated by Jonathon Turel about 5 years ago
- Project changed from Katello to Installer
- Target version deleted (
Katello 3.12.0)
Updated by The Foreman Bot about 5 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/puppet-qpid/pull/120 added
Updated by The Foreman Bot about 5 years ago
- Pull request https://github.com/theforeman/puppet-katello/pull/283 added
Updated by The Foreman Bot about 5 years ago
- Pull request https://github.com/theforeman/puppet-foreman_proxy_content/pull/197 added
Updated by Jonathon Turel about 5 years ago
To test (assumes forklifted dev env):
- follow forklift docs (https://github.com/theforeman/forklift/blob/master/docs/development.md#test-puppet-module-pull-requests) to test the linked PRs
- 'vagrant provision centos7-katello-devel'
- verify that /etc/qpid/qpid.acl is populated according to the PR
- verify that /etc/qpid-dispatch/qdrouter.conf "connector" has sasl-mechanism PLAIN, sasl-username katello_agent and sasl-password that resembles a password
- verify that services qpidd and qdrouterd are running properly
- register a client, verify that package actions can be performed as usual
Updated by Jonathon Turel about 5 years ago
- Priority changed from Normal to High
Updated by Ewoud Kohl van Wijngaarden about 5 years ago
- Category set to Foreman modules
- Status changed from Ready For Testing to Closed
- Target version set to 1.22.0
- Triaged changed from No to Yes
- Fixed in Releases 1.22.0 added
Updated by The Foreman Bot about 5 years ago
- Pull request https://github.com/theforeman/foreman-installer/pull/341 added
Updated by The Foreman Bot about 5 years ago
- Pull request https://github.com/theforeman/puppet-katello/pull/285 added
Updated by Tomer Brisker about 5 years ago
- Subject changed from Add ACLs around Qpid QMF to CVE-2019-3845 - Add ACLs around Qpid QMF
Updated by The Foreman Bot almost 5 years ago
- Pull request https://github.com/theforeman/puppet-foreman_proxy_content/pull/201 added
Actions