java-sig-commits June 2019

java-sig-commits@lists.fedoraproject.org

1 participants
279 discussions

[Bug 1674068] New: maven-wagon-3.3.2 is available
by bugzilla＠redhat.com 08 Jun '20

08 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1674068 Bug ID: 1674068 Summary: maven-wagon-3.3.2 is available Product: Fedora Version: rawhide Status: NEW Component: maven-wagon Keywords: FutureFeature, Triaged Assignee: extras-orphan(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dbhole(a)redhat.com, extras-orphan(a)fedoraproject.org, fnasser(a)redhat.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, yyang(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 3.3.2 Current version/release in rawhide: 3.2.0-2.fc30 URL: http://maven.apache.org/wagon Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1947/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1680430] New: maven-archiver-3.4.0 is available
by bugzilla＠redhat.com 08 Jun '20

08 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1680430 Bug ID: 1680430 Summary: maven-archiver-3.4.0 is available Product: Fedora Version: rawhide Status: NEW Component: maven-archiver Keywords: FutureFeature, Triaged Assignee: extras-orphan(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 3.4.0 Current version/release in rawhide: 3.2.0-4.fc30 URL: http://repo2.maven.org/maven2/org/apache/maven/maven-archiver/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1895/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1692150] New: bcel-6.3.1 is available
by bugzilla＠redhat.com 08 Jun '20

08 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1692150 Bug ID: 1692150 Summary: bcel-6.3.1 is available Product: Fedora Version: rawhide Status: NEW Component: bcel Keywords: FutureFeature, Triaged Assignee: extras-orphan(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: agrimm(a)gmail.com, extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, richardfearn(a)gmail.com Target Milestone: --- Classification: Fedora Latest upstream release: 6.3.1 Current version/release in rawhide: 6.2-4.fc30 URL: http://www.apache.org/dist/commons/bcel/source/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/171/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1697251] New: maven-plugin-bundle-4.2.0 is available
by bugzilla＠redhat.com 07 Jun '20

07 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1697251 Bug ID: 1697251 Summary: maven-plugin-bundle-4.2.0 is available Product: Fedora Version: rawhide Status: NEW Component: maven-plugin-bundle Keywords: FutureFeature, Triaged Assignee: stewardship-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mhroncok(a)redhat.com, mizdebsk(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 4.2.0 Current version/release in rawhide: 3.5.1-2.fc30 URL: http://repo2.maven.org/maven2/org/apache/felix/maven-bundle-plugin/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1922/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1699465] New: maven-3.6.1 is available
by bugzilla＠redhat.com 06 Jun '20

06 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1699465 Bug ID: 1699465 Summary: maven-3.6.1 is available Product: Fedora Version: rawhide Status: NEW Component: maven Keywords: FutureFeature, Triaged Assignee: stewardship-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, jamielinux(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mhroncok(a)redhat.com, mizdebsk(a)redhat.com, msrb(a)redhat.com, sochotni(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 3.6.1 Current version/release in rawhide: 3.5.4-7.fc30 URL: https://maven.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1894/ -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1715197] New: CVE-2019-0201 zookeeper: Information disclosure in Apache ZooKeeper
by bugzilla＠redhat.com 26 May '20

26 May '20

https://bugzilla.redhat.com/show_bug.cgi?id=1715197 Bug ID: 1715197 Summary: CVE-2019-0201 zookeeper: Information disclosure in Apache ZooKeeper Product: Security Response Hardware: All OS: Linux Status: NEW Whiteboard: impact=important,public=20190520,reported=20190520,sou rce=oss-security,cvss3=7.5/CVSS:3.0/AV:N/AC:L/PR:N/UI: N/S:U/C:H/I:N/A:N,cwe=CWE-732,fedora-all/zookeeper=aff ected,amq-6/zookeeper=new,jdv-6/zookeeper=new,amq-st/z ookeeper=new,bpms-6/zookeeper=new,brms-6/zookeeper=new ,fsw-6/zookeeper=new,fuse-6/zookeeper=new,fuse-7/zooke eper=new,vertx-3/zookeeper=new Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: lpardo(a)redhat.com CC: aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, ataylor(a)redhat.com, avibelli(a)redhat.com, bgeorges(a)redhat.com, chazlett(a)redhat.com, ctubbsii(a)fedoraproject.org, drieden(a)redhat.com, etirelli(a)redhat.com, gvarsami(a)redhat.com, ibek(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jbalunas(a)redhat.com, jcoleman(a)redhat.com, jochrist(a)redhat.com, jolee(a)redhat.com, jpallich(a)redhat.com, jschatte(a)redhat.com, jstastny(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, ldimaggi(a)redhat.com, lpetrovi(a)redhat.com, lthon(a)redhat.com, mluscon(a)gmail.com, mnovotny(a)redhat.com, mszynkie(a)redhat.com, nwallace(a)redhat.com, paradhya(a)redhat.com, pgallagh(a)redhat.com, rrajasek(a)redhat.com, rruss(a)redhat.com, rsynek(a)redhat.com, rwagner(a)redhat.com, sdaley(a)redhat.com, s(a)shk.io, tcunning(a)redhat.com, tkirby(a)redhat.com, trogers(a)redhat.com, tstclair(a)heptio.com, vhalbert(a)redhat.com Target Milestone: --- Classification: Other An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper's getACL() command doesn't check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users. References: http://www.securityfocus.com/bid/108427 https://issues.apache.org/jira/browse/ZOOKEEPER-1392 https://zookeeper.apache.org/security.html#CVE-2019-0201 -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1715199] New: CVE-2019-0201 zookeeper: Information disclosure in Apache ZooKeeper [fedora-all]
by bugzilla＠redhat.com 26 May '20

26 May '20

https://bugzilla.redhat.com/show_bug.cgi?id=1715199 Bug ID: 1715199 Summary: CVE-2019-0201 zookeeper: Information disclosure in Apache ZooKeeper [fedora-all] Product: Fedora Version: 30 Status: NEW Component: zookeeper Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: tstclair(a)heptio.com Reporter: lpardo(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ctubbsii(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mluscon(a)gmail.com, s(a)shk.io, tstclair(a)heptio.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1701735] New: Jenkins fails to start due to a systemd-incompatible script being used
by bugzilla＠redhat.com 26 May '20

26 May '20

https://bugzilla.redhat.com/show_bug.cgi?id=1701735 Bug ID: 1701735 Summary: Jenkins fails to start due to a systemd-incompatible script being used Product: Fedora Version: 30 Hardware: x86_64 OS: Linux Status: NEW Component: jenkins Severity: high Assignee: msrb(a)redhat.com Reporter: rh.bugzilla(a)vadim.ws QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Jenkins fails to start when installed on a freshly installed VM with nothing on it. Apr 21 11:57:58 jenkins systemd[1]: Starting Jenkins continuous build server... -- Subject: A start job for unit jenkins.service has begun execution -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- A start job for unit jenkins.service has begun execution. -- -- The job identifier is 7725. Apr 21 11:57:58 jenkins jenkins[22594]: /usr/libexec/jenkins/jenkins: line 45: /etc/init.d/functions: No such file or directory Apr 21 11:57:58 jenkins systemd[1]: jenkins.service: Control process exited, code=exited, status=1/FAILURE -- Subject: Unit process exited -- Defined-By: systemd -- Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- An ExecStart= process belonging to unit jenkins.service has exited. -- -- The process' exit code is 'exited' and its exit status is 1. This appears to indicate that Jenkins is packaged with a SysV-reliant script that is not going to work on Fedora, since there is no package that provides /etc/init.d/functions. Version-Release number of selected component (if applicable): 1.651.3 How reproducible: Completely. Steps to Reproduce: 1. Install Fedora 30 (used netinstall iso) 2. dnf install jenkins 3. systemctl start jenkins Actual results: Job for jenkins.service failed because the control process exited with error code. See "systemctl status jenkins.service" and "journalctl -xe" for details. Expected results: Jenkins should start Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1687242] New: modello-1.10.0 is available
by bugzilla＠redhat.com 24 May '20

24 May '20

https://bugzilla.redhat.com/show_bug.cgi?id=1687242 Bug ID: 1687242 Summary: modello-1.10.0 is available Product: Fedora Version: rawhide Status: NEW Component: modello Keywords: FutureFeature, Triaged Assignee: extras-orphan(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, yyang(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.10.0 Current version/release in rawhide: 1.9.1-8.fc30 URL: http://codehaus-plexus.github.io/modello Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/2002/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1707719] New: ant-1.10.6 is available
by bugzilla＠redhat.com 11 May '20

11 May '20

https://bugzilla.redhat.com/show_bug.cgi?id=1707719 Bug ID: 1707719 Summary: ant-1.10.6 is available Product: Fedora Version: rawhide Status: NEW Component: ant Keywords: FutureFeature, Triaged Assignee: fdc(a)fcami.net Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dmoluguw(a)redhat.com, fdc(a)fcami.net, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.10.6 Current version/release in rawhide: 1.10.5-5.fc31 URL: https://ant.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/50/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

← Newer
1
2
3
4
5
6
7
...
28
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits June 2019