Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-73397

Unable to test the CVE-2020-1695 reproducer

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Undefined Undefined
    • None
    • rhel-9.6
    • pki-core
    • None
    • Yes
    • None
    • rhel-idm-cs
    • ssg_idm
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None

      What were you trying to do that didn't work?

      Unable to compile and test the reproducer of CVE-2020-1695

      What is the impact of this issue to you?

      Failed to validate CVE-2020-1695 reproducer

      Please provide the package NVR for which the bug is seen:

      pki-core-11.6.0-0.3.alpha2.el9.src.rpm

      jss-5.6.0-0.1.alpha1.el9.src.rpm

      pki-resteasy-core-3.0.26-19.el9.noarch

      How reproducible is this bug?:

      Always

      Steps to reproduce

      https://bugzilla.redhat.com/show_bug.cgi?id=1845548#c13

      Expected results

      This test was working in last build here: https://jenkins-csb-idmops-ci.dno.corp.redhat.com/view/Projects/job/Projects/job/dogtag/job/RHEL9.6/job/Nightly-Tier2-other/job/2024-12-11_19-31/job/tier-2-other-topo-00-BZ/1/consoleFull

      Actual results

      Failing in RHEL 9.6 job:

      https://jenkins-csb-idmops-ci.dno.corp.redhat.com/view/Projects/job/Projects/job/dogtag/job/RHEL9.6/job/Nightly-Tier2-other/job/2025-01-08_19-31/job/tier-2-other-topo-00-BZ/1/console

       

      # javac -classpath .:/usr/share/java/resteasy/resteasy-jaxrs.jar:/usr/share/pki/server/common/lib/jaxrs-api.jar /tmp/cve.java
      /tmp/cve.java:12: error: cannot access RuntimeDelegate
                  delegate.fromString("foo/bar\n");
                          ^
        class file for javax.ws.rs.ext.RuntimeDelegate not found
      1 error
      Not able to find 'jaxrs-api.jar' file.
      # find / -name jaxrs-api.jar
      [root@pki1 tmp]# 
      

       

              rhcs-maint RHCS Maintenance
              prisingh@redhat.com Pritam Singh
              RHCS Maintenance RHCS Maintenance
              IdM CS QE IdM CS QE
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: