java-sig-commits August 2015

java-sig-commits@lists.fedoraproject.org

4 participants
227 discussions

[Bug 1256172] New: lucene-5.3.0 is available
by Red Hat Bugzilla 18 Sep '15

18 Sep '15

https://bugzilla.redhat.com/show_bug.cgi?id=1256172 Bug ID: 1256172 Summary: lucene-5.3.0 is available Product: Fedora Version: rawhide Component: lucene Keywords: FutureFeature, Triaged Assignee: akurtako(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, hicham.haouari(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, msimacek(a)redhat.com, puntogil(a)libero.it, rgrunber(a)redhat.com Latest upstream release: 5.3.0 Current version/release in rawhide: 5.2.1-3.fc23 URL: http://lucene.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TLOVlOjsu3&a=cc_unsubscribe _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 8

[Bug 1245633] New: metrics-3.1.2 is available
by Red Hat Bugzilla 18 Sep '15

18 Sep '15

https://bugzilla.redhat.com/show_bug.cgi?id=1245633 Bug ID: 1245633 Summary: metrics-3.1.2 is available Product: Fedora Version: rawhide Component: metrics Assignee: puntogil(a)libero.it Reporter: puntogil(a)libero.it QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Latest upstream release: 3.1.2 Current version/release in Fedora Rawhide: 3.0.1-6.fc24 URL: https://github.com/dropwizard/metrics/tags -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=7AeHoIS2SR&a=cc_unsubscribe

1 6

[Bug 1258522] New: jenkins: CSFR vulnerability allowing remote attacker to hijack authentication [fedora-all]
by Red Hat Bugzilla 14 Sep '15

14 Sep '15

https://bugzilla.redhat.com/show_bug.cgi?id=1258522 Bug ID: 1258522 Summary: jenkins: CSFR vulnerability allowing remote attacker to hijack authentication [fedora-all] Product: Fedora Version: 22 Component: jenkins Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: msrb(a)redhat.com Reporter: amaris(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Blocks: 1258515 This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1258515 [Bug 1258515] jenkins: CSFR vulnerability allowing remote attacker to hijack authentication -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=US1mByZcNC&a=cc_unsubscribe _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 2

[Bug 1093273] New: CVE-2014-0363 smack: incorrect X.509 validation
by Red Hat Bugzilla 03 Sep '15

03 Sep '15

https://bugzilla.redhat.com/show_bug.cgi?id=1093273 Bug ID: 1093273 Summary: CVE-2014-0363 smack: incorrect X.509 validation Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: mmcallis(a)redhat.com CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it, weli(a)redhat.com Common Vulnerabilities and Exposures assigned an identifier CVE-2014-0363 to the following vulnerability: Name: CVE-2014-0363 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0363 Assigned: 20131205 Reference: http://community.igniterealtime.org/blogs/ignite/2014/04/17/asmack-400-rc1-… Reference: http://issues.igniterealtime.org/browse/SMACK-410 Reference: CERT-VN:VU#489228 Reference: http://www.kb.cert.org/vuls/id/489228 The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate chain. The man-in-the-middle attacker requires a certificate that is valid for any domain name. Upstream patch: http://fisheye.igniterealtime.org/changelog/smackgit?cs=93030c218c62cf0a0a8… >From code inspection, this issue affects the 3.2.2 version in Fedora (the CERT advisory mentions version 3.4.1 and possibly earlier versions). -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=1wrKeWsHiZ&a=cc_unsubscribe

1 24

[Bug 1257931] New: mojo-parent-38 is available
by Red Hat Bugzilla 31 Aug '15

31 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=1257931 Bug ID: 1257931 Summary: mojo-parent-38 is available Product: Fedora Version: rawhide Component: mojo-parent Keywords: FutureFeature, Triaged Assignee: mizdebsk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msimacek(a)redhat.com, msrb(a)redhat.com Latest upstream release: 38 Current version/release in rawhide: 37-2.fc24 URL: http://repo2.maven.org/maven2/org/codehaus/mojo/mojo-parent/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=4QMzh7jzUO&a=cc_unsubscribe _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 5

[Bug 1257930] New: maven-enforcer-1.4.1 is available
by Red Hat Bugzilla 31 Aug '15

31 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=1257930 Bug ID: 1257930 Summary: maven-enforcer-1.4.1 is available Product: Fedora Version: rawhide Component: maven-enforcer Keywords: FutureFeature, Triaged Assignee: msimacek(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com, msimacek(a)redhat.com, msrb(a)redhat.com Latest upstream release: 1.4.1 Current version/release in rawhide: 1.4-2.fc23 URL: http://repo1.maven.org/maven2/org/apache/maven/enforcer/enforcer/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ZnkKmgrcNL&a=cc_unsubscribe _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 5

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 30 Aug '15

30 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |995438 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=995438 [Bug 995438] Review Request: tyrus - JSR 356: Java API for WebSocket - Reference Implementation -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug. _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 29 Aug '15

29 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1246846 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1246846 [Bug 1246846] Review Request: jmh - Java Microbenchmark Harness -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug. _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 28 Aug '15

28 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1243758 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1243758 [Bug 1243758] Review Request: apacheds-jdbm - ApacheDS specific JDBM Implementation -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug. _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 28 Aug '15

28 Aug '15

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1228203 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1228203 [Bug 1228203] Review Request: springframework-data-redis - Provides support to increase developer productivity in Java when using Redis -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug. _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…

1 0

← Newer
1
...
11
12
13
14
15
16
17
...
23
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits August 2015