java-sig-commits November 2016

java-sig-commits@lists.fedoraproject.org

2 participants
260 discussions

[Bug 1390493] CVE-2016-6797 tomcat: unrestricted access to global resources
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390493 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1390531 Depends On| |1390532 Depends On| |1390533 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1390532 [Bug 1390532] CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 tomcat: various flaws [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1390533 [Bug 1390533] CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 tomcat: various flaws [epel-6] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390526] CVE-2016-0762 tomcat: timing attack in Realm implementation
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390526 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alee(a)redhat.com, | |ivan.afonichev(a)gmail.com, | |java-sig-commits(a)lists.fedo | |raproject.org, | |krzysztof.daniel(a)gmail.com, | |me(a)coolsvap.net, | |trick(a)vanstaveren.us Horia Chiorean <hchiorea(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|hchiorea(a)redhat.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390526] CVE-2016-0762 tomcat: timing attack in Realm implementation
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390526 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alee(a)redhat.com, | |ivan.afonichev(a)gmail.com, | |java-sig-commits(a)lists.fedo | |raproject.org, | |krzysztof.daniel(a)gmail.com, | |me(a)coolsvap.net, | |trick(a)vanstaveren.us -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390525] CVE-2016-5018 tomcat: security manager bypass via IntrospectHelper utility function
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390525 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alee(a)redhat.com, | |ivan.afonichev(a)gmail.com, | |java-sig-commits(a)lists.fedo | |raproject.org, | |krzysztof.daniel(a)gmail.com, | |me(a)coolsvap.net, | |trick(a)vanstaveren.us -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390520] CVE-2016-6794 tomcat: system property disclosure
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

1 0

[Bug 1390520] CVE-2016-6794 tomcat: system property disclosure
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390520 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alee(a)redhat.com, | |ivan.afonichev(a)gmail.com, | |java-sig-commits(a)lists.fedo | |raproject.org, | |krzysztof.daniel(a)gmail.com, | |me(a)coolsvap.net, | |trick(a)vanstaveren.us -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390515] CVE-2016-6796 tomcat: security manager bypass via JSP Servlet config parameters
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1390515 Martin Prpic <mprpic(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alee(a)redhat.com, | |ivan.afonichev(a)gmail.com, | |java-sig-commits(a)lists.fedo | |raproject.org, | |krzysztof.daniel(a)gmail.com, | |me(a)coolsvap.net, | |trick(a)vanstaveren.us -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1390493] CVE-2016-6797 tomcat: unrestricted access to global resources
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

1 0

[Bug 1389581] New: takari-lifecycle-1.12.2 is available
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1389581 Bug ID: 1389581 Summary: takari-lifecycle-1.12.2 is available Product: Fedora Version: rawhide Component: takari-lifecycle Keywords: FutureFeature, Triaged Assignee: mizdebsk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msimacek(a)redhat.com Latest upstream release: 1.12.2 Current version/release in rawhide: 1.12.1-1.fc26 URL: http://takari.io Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/9577/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1378414] New: jetty-build-support-1.4 is available
by Red Hat Bugzilla 01 Nov '16

01 Nov '16

https://bugzilla.redhat.com/show_bug.cgi?id=1378414 Bug ID: 1378414 Summary: jetty-build-support-1.4 is available Product: Fedora Version: rawhide Component: jetty-build-support Keywords: FutureFeature, Triaged Assignee: mizdebsk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msimacek(a)redhat.com Latest upstream release: 1.4 Current version/release in rawhide: 1.1-16.fc24 URL: http://www.eclipse.org/jetty/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/11765/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits November 2016