eclipse-sig April 2021

eclipse-sig@lists.fedoraproject.org

1 participants
50 discussions

[Bug 1945715] New: CVE-2021-28165 jetty: Resource exhaustion when receiving an invalid large TLS frame [fedora-all]
by bugzilla＠redhat.com 30 Apr '21

30 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1945715 Bug ID: 1945715 Summary: CVE-2021-28165 jetty: Resource exhaustion when receiving an invalid large TLS frame [fedora-all] Product: Fedora Version: 33 Status: NEW Component: jetty Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mat.booth(a)gmail.com Reporter: psampaio(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1945713] New: CVE-2021-28164 jetty: Ambiguous paths can access WEB-INF [fedora-all]
by bugzilla＠redhat.com 30 Apr '21

30 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1945713 Bug ID: 1945713 Summary: CVE-2021-28164 jetty: Ambiguous paths can access WEB-INF [fedora-all] Product: Fedora Version: 33 Status: NEW Component: jetty Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mat.booth(a)gmail.com Reporter: psampaio(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1945711] New: CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents [fedora-all]
by bugzilla＠redhat.com 30 Apr '21

30 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1945711 Bug ID: 1945711 Summary: CVE-2021-28163 jetty: Symlink directory exposes webapp directory contents [fedora-all] Product: Fedora Version: 33 Status: NEW Component: jetty Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: mat.booth(a)gmail.com Reporter: psampaio(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 10

[Bug 1941336] New: Unable to push to repository from eclipse
by bugzilla＠redhat.com 29 Apr '21

29 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1941336 Bug ID: 1941336 Summary: Unable to push to repository from eclipse Product: Fedora Version: 33 Hardware: x86_64 OS: Linux Status: NEW Component: eclipse-jgit Severity: urgent Assignee: mat.booth(a)redhat.com Reporter: danielsun3164(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, andjrobins(a)gmail.com, eclipse-sig(a)lists.fedoraproject.org, jerboaa(a)gmail.com, mat.booth(a)redhat.com, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: Unable to push to repository from eclipse Version-Release number of selected component (if applicable): $ rpm -q jgit eclipse-egit eclipse-jgit jgit-5.11.0-1.fc33.noarch eclipse-egit-5.11.0-1.fc33.noarch eclipse-jgit-5.11.0-1.fc33.noarch How reproducible: Everytime Steps to Reproduce: 1. Push to github repository from eclipse 2. 3. Actual results: Eclipse shows an error about "remote hung up unexpectedly". Expected results: Eclipse should be able to push to github repository Additional info: The following log was in .metadata/.log org.eclipse.jgit.errors.TransportException: git@github.com:username/project.git: remote hung up unexpectedly at org.eclipse.jgit.transport.TransportGitSsh$SshPushConnection.<init>(TransportGitSsh.java:383) at org.eclipse.jgit.transport.TransportGitSsh.openPush(TransportGitSsh.java:159) at org.eclipse.jgit.transport.PushProcess.execute(PushProcess.java:127) at org.eclipse.jgit.transport.Transport.push(Transport.java:1384) at org.eclipse.egit.core.op.PushOperation.run(PushOperation.java:191) at org.eclipse.egit.ui.internal.push.ConfirmationPage$2.run(ConfirmationPage.java:210) at org.eclipse.jface.operation.ModalContext$ModalContextThread.run(ModalContext.java:122) Caused by: java.lang.NoClassDefFoundError: Could not initialize class org.eclipse.jgit.internal.transport.sshd.CachingKeyPairProvider at org.eclipse.jgit.transport.sshd.SshdSessionFactory.lambda$getDefaultKeys$5(SshdSessionFactory.java:489) at java.base/java.util.concurrent.ConcurrentHashMap.computeIfAbsent(ConcurrentHashMap.java:1705) at org.eclipse.jgit.transport.sshd.SshdSessionFactory.getDefaultKeys(SshdSessionFactory.java:487) at org.eclipse.jgit.transport.sshd.SshdSessionFactory.lambda$getSession$1(SshdSessionFactory.java:202) at org.eclipse.jgit.transport.sshd.SshdSession.<init>(SshdSession.java:91) at org.eclipse.jgit.transport.sshd.SshdSessionFactory.getSession(SshdSessionFactory.java:186) at org.eclipse.jgit.transport.sshd.SshdSessionFactory.getSession(SshdSessionFactory.java:73) at org.eclipse.jgit.transport.SshTransport.getSession(SshTransport.java:107) at org.eclipse.jgit.transport.TransportGitSsh$SshPushConnection.<init>(TransportGitSsh.java:358) ... 6 more -- You are receiving this mail because: You are on the CC list for the bug.

1 9

[Bug 1937445] New: CVE-2020-13959 velocity: XSS in the default error page for VelocityView
by bugzilla＠redhat.com 28 Apr '21

28 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1937445 Bug ID: 1937445 Summary: CVE-2020-13959 velocity: XSS in the default error page for VelocityView Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: aboyko(a)redhat.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, akurtako(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, andjrobins(a)gmail.com, anstephe(a)redhat.com, aos-bugs(a)redhat.com, asoldano(a)redhat.com, atangrin(a)redhat.com, ataylor(a)redhat.com, bbaranow(a)redhat.com, bibryam(a)redhat.com, bmaxwell(a)redhat.com, bmontgom(a)redhat.com, brian.stansberry(a)redhat.com, cdewolf(a)redhat.com, chazlett(a)redhat.com, darran.lofthouse(a)redhat.com, dbhole(a)redhat.com, decathorpe(a)gmail.com, devrim(a)gunduz.org, dkreling(a)redhat.com, dosoudil(a)redhat.com, drieden(a)redhat.com, ebaron(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, eleandro(a)redhat.com, eparis(a)redhat.com, etirelli(a)redhat.com, fjuma(a)redhat.com, ganandan(a)redhat.com, ggaughan(a)redhat.com, gmalinko(a)redhat.com, gvarsami(a)redhat.com, hbraun(a)redhat.com, ibek(a)redhat.com, iweiss(a)redhat.com, janstey(a)redhat.com, java-maint(a)redhat.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jburrell(a)redhat.com, jcantril(a)redhat.com, jcoleman(a)redhat.com, jerboaa(a)gmail.com, jjohnstn(a)redhat.com, jochrist(a)redhat.com, jokerman(a)redhat.com, jolee(a)redhat.com, jperkins(a)redhat.com, jross(a)redhat.com, jschatte(a)redhat.com, jstastny(a)redhat.com, jwon(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, kwills(a)redhat.com, ldimaggi(a)redhat.com, lef(a)fedoraproject.org, lgao(a)redhat.com, loleary(a)redhat.com, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, mnovotny(a)redhat.com, msochure(a)redhat.com, msvehla(a)redhat.com, nstielau(a)redhat.com, nwallace(a)redhat.com, pantinor(a)redhat.com, pjindal(a)redhat.com, pmackay(a)redhat.com, rgrunber(a)redhat.com, rguimara(a)redhat.com, rhcs-maint(a)redhat.com, rrajasek(a)redhat.com, rstancel(a)redhat.com, rsvoboda(a)redhat.com, rsynek(a)redhat.com, rwagner(a)redhat.com, sdaley(a)redhat.com, sd-operator-metering(a)redhat.com, smaestri(a)redhat.com, sochotni(a)redhat.com, spinder(a)redhat.com, sponnaga(a)redhat.com, tcunning(a)redhat.com, tflannag(a)redhat.com, theute(a)redhat.com, tkirby(a)redhat.com, tom.jenkinson(a)redhat.com, yborgess(a)redhat.com Target Milestone: --- Classification: Other The default error page for VelocityView in Apache Velocity Tools prior to 3.1 reflects back the vm file that was entered as part of the URL. An attacker can set an XSS payload file as this vm file in the URL which results in this payload being executed. XSS vulnerabilities allow attackers to execute arbitrary JavaScript in the context of the attacked website and the attacked user. This can be abused to steal session cookies, perform requests in the name of the victim or for phishing attacks. References: https://lists.apache.org/thread.html/r6802a38c3041059e763a1aadd7b37fe95de75… http://www.openwall.com/lists/oss-security/2021/03/10/2 -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1683547] New: lucene-7.7.1 is available
by bugzilla＠redhat.com 23 Apr '21

23 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1683547 Bug ID: 1683547 Summary: lucene-7.7.1 is available Product: Fedora Version: rawhide Status: NEW Component: lucene Keywords: FutureFeature, Triaged Assignee: akurtako(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dbhole(a)redhat.com, dingyichen(a)gmail.com, eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, lef(a)fedoraproject.org, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 7.7.1 Current version/release in rawhide: 7.7.0-1.fc30 URL: http://lucene.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/7178/ -- You are receiving this mail because: You are on the CC list for the bug.

1 42

[Bug 1937950] New: Eclipse Plugin Development Environment is not correct, org.eclipse.ui unresolved
by bugzilla＠redhat.com 23 Apr '21

23 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1937950 Bug ID: 1937950 Summary: Eclipse Plugin Development Environment is not correct, org.eclipse.ui unresolved Product: Fedora Version: 34 Hardware: x86_64 OS: Linux Status: NEW Component: eclipse Severity: high Assignee: mat.booth(a)redhat.com Reporter: p1mail2015(a)mail.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, andjrobins(a)gmail.com, dbhole(a)redhat.com, ebaron(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, jerboaa(a)gmail.com, jjohnstn(a)redhat.com, lef(a)fedoraproject.org, mat.booth(a)redhat.com, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora How reproducible: Always. Steps to Reproduce: Install Fedora 34 beta https://dl.fedoraproject.org/pub/alt/stage/34_Beta-1.1/Spins/x86_64/iso/Fed… Or use Fedora 33. 1. Start Eclipse 2. Open a new empty Workspace. 3. Create a project: Plug-in Development/Plug-in Project, Next, <Test_name>, Next, Next 4. Create a plug-in using a template: Hello, World Command, Finish. 5. Open Perspective. Actual results: In MANIFEST.MF/Dependencies 'org.eclipse.ui' unresolved (red x) Errors (17 items) Description Resource Path Location Type AbstractHandler cannot be resolved to a type SampleHandler.java /Test/src/test/handlers line 10 Java Problem Bundle 'org.eclipse.ui' cannot be resolved MANIFEST.MF /Test/META-INF line 6 Plug-in Problem ExecutionEvent cannot be resolved to a type SampleHandler.java /Test/src/test/handlers line 13 Java Problem ExecutionException cannot be resolved to a type SampleHandler.java /Test/src/test/handlers line 13 Java Problem HandlerUtil cannot be resolved SampleHandler.java /Test/src/test/handlers line 14 Java Problem IWorkbenchWindow cannot be resolved to a type SampleHandler.java /Test/src/test/handlers line 14 Java Problem MessageDialog cannot be resolved SampleHandler.java /Test/src/test/handlers line 15 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 3 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 4 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 5 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 6 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 7 Java Problem The import org.eclipse cannot be resolved SampleHandler.java /Test/src/test/handlers line 8 Java Problem Unknown extension point: 'org.eclipse.ui.bindings' plugin.xml /Test line 25 Plug-in Problem Unknown extension point: 'org.eclipse.ui.commands' plugin.xml /Test line 6 Plug-in Problem Unknown extension point: 'org.eclipse.ui.handlers' plugin.xml /Test line 18 Plug-in Problem Unknown extension point: 'org.eclipse.ui.menus' plugin.xml /Test line 34 Plug-in Problem Expected results: Additional info: This works in my old F30 system. What differ between Eclipse 2020-12 (4.18 w. openjdk 11.0.10, F33) and Eclipse 2019-06 (4.12 w. openjdk 1.8.0, F30) is the number of plugins in the Target platform. Going into Windows/Preferences/Plug-in Development/Target Platform/Running Platform/Edit: I have 5501 plugins in my F30 system but only 574 in my new F33 system. And in tab Content: Bundle 'org.eclipse.ui' is missing in F33! This is working in following release downloaded from from 'eclipse.org'. Version: 2020-12 (4.18.0) Build id: 20201210-1552. Install: ./eclipse-inst select 'Eclipse IDE for Eclipse Committe' (/usr/lib/jvm/jre-15-openjdk) F34: eclipse-platform-4.18-3.fc34.x86_64 eclipse-pde-4.18-3.fc34.x86_64 Noticeable here is that the version is more or less same between F34 (4.18.3) and Eclipse (4.18.0) so I guess it must be a packaging issue... -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1925966] New: Eclipse IDE not working in Fedora 33 - fails with BundleException - could not resolve module org.eclipse.compare
by bugzilla＠redhat.com 23 Apr '21

23 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1925966 Bug ID: 1925966 Summary: Eclipse IDE not working in Fedora 33 - fails with BundleException - could not resolve module org.eclipse.compare Product: Fedora Version: 33 Hardware: x86_64 OS: Linux Status: NEW Component: eclipse Severity: low Assignee: mat.booth(a)redhat.com Reporter: paul.brian.coleman(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, andjrobins(a)gmail.com, dbhole(a)redhat.com, ebaron(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, jerboaa(a)gmail.com, jjohnstn(a)redhat.com, lef(a)fedoraproject.org, mat.booth(a)redhat.com, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Created attachment 1755529 --> https://bugzilla.redhat.com/attachment.cgi?id=1755529&action=edit eclipse log file Installation of Eclipse package from Fedora 33 repo finishes without error, but Eclipse does not start when run. Version-Release number of selected component (if applicable): Fedora:33, 64bit Java: OpenJDK 18.0.10+9, mixed mode sharing Eclipse-platform 4.18 1.fc33 How reproducible: Steps to Reproduce: 1. sudo dnf remove eclipse eclipse-equinox-osgi eclipse-emf-core eclipse-swt eclipse-ecf-core 2. rpm -qa | grep eclipse # verified no eclipse packages present 3. sudo dnf install eclipse #installed eclipse-jdt, apiguardian, eclipse-ecf-core, eclipse-emf-core, eclipse-equinox-osgi, eclipse-platform, eclipse-swt 4. open terminal 5. enter "eclipse" Actual results: - get splash screen for fractional second and then a GTK dialog box to check the log file for errors - eclipse does not start - disappointment Expected results: - eclipse to start Additional info: up-to-date Fedora 33 machine Eclipse was installed previously (possibly under Fedora 32) -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1887176] New: Ecliple wont start after install.
by bugzilla＠redhat.com 23 Apr '21

23 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1887176 Bug ID: 1887176 Summary: Ecliple wont start after install. Product: Fedora Version: 32 Hardware: x86_64 OS: Linux Status: NEW Component: eclipse Assignee: mat.booth(a)redhat.com Reporter: pwrzonca(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, andjrobins(a)gmail.com, dbhole(a)redhat.com, ebaron(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, jerboaa(a)gmail.com, jjohnstn(a)redhat.com, lef(a)fedoraproject.org, mat.booth(a)redhat.com, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Created attachment 1720675 --> https://bugzilla.redhat.com/attachment.cgi?id=1720675&action=edit logfile Description of problem: Ecliple wont start after install. Version-Release number of selected component (if applicable): fedora 32, eclipse 2020-06 How reproducible: Steps to Reproduce: 1. Install eclipse 2. Try to start it 3. Actual results: Error massage that direct me to read log which doesn't say too much for me. Expected results: Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1895529] New: Eclipse do not start
by bugzilla＠redhat.com 23 Apr '21

23 Apr '21

https://bugzilla.redhat.com/show_bug.cgi?id=1895529 Bug ID: 1895529 Summary: Eclipse do not start Product: Fedora Version: 33 Status: NEW Component: eclipse Assignee: mat.booth(a)redhat.com Reporter: pwrzonca(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, andjrobins(a)gmail.com, dbhole(a)redhat.com, ebaron(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, jerboaa(a)gmail.com, jjohnstn(a)redhat.com, lef(a)fedoraproject.org, mat.booth(a)redhat.com, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Created attachment 1727294 --> https://bugzilla.redhat.com/attachment.cgi?id=1727294&action=edit Log file Description of problem: Fresh install of eclipse. It does not start and an error message pops up with location of log file (enclosing). Version-Release number of selected component (if applicable): 1:4.16-13 How reproducible: Steps to Reproduce: 1. sudo dnf install eclipse 2. run eclipse 3. Actual results: Error message. Expected results: Working Eclipse. Additional info: -- You are receiving this mail because: You are on the CC list for the bug.

1 3

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

eclipse-sig April 2021