Hi, We found a vulnerability on Copr that allows a regular user to retrieve user’s password hashes on the server. Could you please provide us a GPG key in order to send back technical details of the bug ? Best regards, Fenrisk Team

Thank you Maxime for the attempt to contact us here. As mentioned in the bug 2327274, this shouldn’t be a security problem. I at least created an upstream issue for validation and I enabled the vulnerability GitHub feature in the Copr project . Feel free to use that page next time, or fallbac…

Fedora vulnerability report

Ask Fedora

alciregi (Alessio) Tags updated November 20, 2024, 8:01am 6

Added copr

Topic		Replies	Views	Activity
Verify public key for COPR repositories Ask Fedora copr	1	887	July 9, 2022

Fedora vulnerability report

Related topics