You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Felix Knecht (JIRA)" <ji...@apache.org> on 2011/02/25 11:27:38 UTC
[jira] Created: (PROTOCOLS-18) May expose internal representation
by storing an externally mutable object
May expose internal representation by storing an externally mutable object
--------------------------------------------------------------------------
Key: PROTOCOLS-18
URL: https://issues.apache.org/jira/browse/PROTOCOLS-18
Project: JAMES Protocols
Issue Type: Bug
Components: lmtp
Affects Versions: 1.2.1
Environment: all
Reporter: Felix Knecht
Assignee: Norman Maurer
This might become a security problem. See also http://people.apache.org/~felixk/james/protocols/trunk/protocols-impl/findbugs.html#org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org
[jira] Commented: (PROTOCOLS-18) May expose internal representation
by storing an externally mutable object
Posted by "Felix Knecht (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/PROTOCOLS-18?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13003314#comment-13003314 ]
Felix Knecht commented on PROTOCOLS-18:
---------------------------------------
Detailed problem is:
new org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory(int, int, int, ChannelGroup, String[]) may expose internal representation by storing an externally mutable object into AbstractSSLAwareChannelPipelineFactory.enabledCipherSuites
> May expose internal representation by storing an externally mutable object
> --------------------------------------------------------------------------
>
> Key: PROTOCOLS-18
> URL: https://issues.apache.org/jira/browse/PROTOCOLS-18
> Project: JAMES Protocols
> Issue Type: Bug
> Components: lmtp
> Affects Versions: 1.2.1
> Environment: all
> Reporter: Felix Knecht
> Assignee: Norman Maurer
> Labels: security
> Attachments: enabledCipherSuites.patch
>
>
> This might become a security problem. See also http://people.apache.org/~felixk/james/protocols/trunk/protocols-impl/findbugs.html#org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org
[jira] Updated: (PROTOCOLS-18) May expose internal representation
by storing an externally mutable object
Posted by "Felix Knecht (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/PROTOCOLS-18?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Knecht updated PROTOCOLS-18:
----------------------------------
Attachment: enabledCipherSuites.patch
> May expose internal representation by storing an externally mutable object
> --------------------------------------------------------------------------
>
> Key: PROTOCOLS-18
> URL: https://issues.apache.org/jira/browse/PROTOCOLS-18
> Project: JAMES Protocols
> Issue Type: Bug
> Components: lmtp
> Affects Versions: 1.2.1
> Environment: all
> Reporter: Felix Knecht
> Assignee: Norman Maurer
> Labels: security
> Attachments: enabledCipherSuites.patch
>
>
> This might become a security problem. See also http://people.apache.org/~felixk/james/protocols/trunk/protocols-impl/findbugs.html#org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory
--
This message is automatically generated by JIRA.
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org
[jira] Closed: (PROTOCOLS-18) May expose internal representation by
storing an externally mutable object
Posted by "Felix Knecht (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/PROTOCOLS-18?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Knecht closed PROTOCOLS-18.
---------------------------------
> May expose internal representation by storing an externally mutable object
> --------------------------------------------------------------------------
>
> Key: PROTOCOLS-18
> URL: https://issues.apache.org/jira/browse/PROTOCOLS-18
> Project: JAMES Protocols
> Issue Type: Bug
> Components: lmtp
> Affects Versions: 1.2.1
> Environment: all
> Reporter: Felix Knecht
> Assignee: Felix Knecht
> Labels: security
> Fix For: 1.2.1
>
> Attachments: enabledCipherSuites.patch
>
>
> This might become a security problem. See also http://people.apache.org/~felixk/james/protocols/trunk/protocols-impl/findbugs.html#org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org
[jira] Resolved: (PROTOCOLS-18) May expose internal representation
by storing an externally mutable object
Posted by "Felix Knecht (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/PROTOCOLS-18?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Felix Knecht resolved PROTOCOLS-18.
-----------------------------------
Resolution: Fixed
Fix Version/s: 1.2.1
Assignee: Felix Knecht (was: Norman Maurer)
See http://svn.apache.org/viewvc?rev=1078731&view=rev
> May expose internal representation by storing an externally mutable object
> --------------------------------------------------------------------------
>
> Key: PROTOCOLS-18
> URL: https://issues.apache.org/jira/browse/PROTOCOLS-18
> Project: JAMES Protocols
> Issue Type: Bug
> Components: lmtp
> Affects Versions: 1.2.1
> Environment: all
> Reporter: Felix Knecht
> Assignee: Felix Knecht
> Labels: security
> Fix For: 1.2.1
>
> Attachments: enabledCipherSuites.patch
>
>
> This might become a security problem. See also http://people.apache.org/~felixk/james/protocols/trunk/protocols-impl/findbugs.html#org.apache.james.protocols.impl.AbstractSSLAwareChannelPipelineFactory
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org