java-sig-commits July 2017

java-sig-commits@lists.fedoraproject.org

2 participants
296 discussions

[Bug 1472494] New: jna no longer provides osgi(com.sun.jna)
by bugzilla＠redhat.com 19 Jul '17

19 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1472494 Bug ID: 1472494 Summary: jna no longer provides osgi(com.sun.jna) Product: Fedora Version: rawhide Component: jna Assignee: mizdebsk(a)redhat.com Reporter: tdawson(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dbhole(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, lfarkas(a)lfarkas.org, mizdebsk(a)redhat.com, msimacek(a)redhat.com, walters(a)redhat.com Description of problem: jna-4.4.0-4 no longer provides osgi(com.sun.jna). this is problem because jna-contrib requires it. Version-Release number of selected component (if applicable): jna-4.4.0-4.fc27 How reproducible: 100% Steps to Reproduce: 1.dnf install jna-contrib 2. 3. Actual results: Last metadata expiration check: 0:00:30 ago on Tue 18 Jul 2017 06:01:47 PM CDT. Error: Problem: conflicting requests - nothing provides osgi(com.sun.jna) needed by jna-contrib-4.4.0-4.fc27.noarch Expected results: Installing: jna-contrib noarch 4.4.0-4.fc26 Installing dependencies: jna x86_64 4.4.0-4.fc26 Additional info: You can see the difference in the provdes by looking at the info pages for the builds. jna-4.4.0-4.fc27 (not working) https://koji.fedoraproject.org/koji/rpminfo?rpmID=10178780 jna-4.4.0-2.fc27 (working) https://koji.fedoraproject.org/koji/rpminfo?rpmID=10092224 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

Broken dependencies: aether-ant-tasks
by buildsys＠fedoraproject.org 18 Jul '17

18 Jul '17

aether-ant-tasks has broken dependencies in the rawhide tree: On x86_64: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher On armhfp: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher On ppc64le: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher On aarch64: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher On ppc64: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher On i386: 1:aether-ant-tasks-1.0.1-6.fc26.noarch requires xmvn-launcher Please resolve this as soon as possible.

1 0

Broken dependencies: jna
by buildsys＠fedoraproject.org 18 Jul '17

18 Jul '17

jna has broken dependencies in the rawhide tree: On x86_64: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) On armhfp: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) On ppc64le: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) On aarch64: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) On ppc64: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) On i386: jna-contrib-4.4.0-4.fc27.noarch requires osgi(com.sun.jna) Please resolve this as soon as possible.

1 0

[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla＠redhat.com 16 Jul '17

16 Jul '17

1 0

[Bug 1470536] New: Simple Lagom example is not working under Fedora 26
by bugzilla＠redhat.com 15 Jul '17

15 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1470536 Bug ID: 1470536 Summary: Simple Lagom example is not working under Fedora 26 Product: Fedora Version: 26 Component: sbt Assignee: willb(a)redhat.com Reporter: aannoaanno(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, s(a)shk.io, willb(a)redhat.com Description of problem: Simple Lagom example is not working under Fedora 26 (and Fedora 25). Example is known to work under Win10 and Ubuntu 17.04/zesty. Lagom is a scala (akka, sbt) based microservice framework running on top of the Java VM (https://www.lagomframework.com). If the lagom example is not working, it is very likely (but not tested) that akka is not working. I've choosen sbt as problematic component. However, I rather think that this is unlikely. I suspect that there is a problem with fedora's security settings. But the example has not worked with firewall and selinux disabled (see below). Version-Release number of selected component (if applicable): lagom version is 1.3.4 How reproducible: Always Steps to Reproduce: 1. Clone the lagon example from https://github.com/aanno/lagom-hello. This is a minimal lagom example as described in https://www.lagomframework.com/get-started-scala.html without any modifications. 2. You need an installed sbt (and, of course a Java SDK) 3. cd lagom-hello 4. /usr/share/sbt/bin/sbt runAll Actual results: sbt logging output indicating the error: [warn] a.c.s.ShardRegion - Trying to register to coordinator at [Some(ActorSelection[Anchor(akka://lagom-hello-impl-application/), Path(/system/sharding/kafkaProducer-greetingsCoordinator/singleton/coordinator)])], but no acknowledgement. Total [1] buffered messages. [warn] a.c.s.ShardRegion - Trying to register to coordinator at [Some(ActorSelection[Anchor(akka://lagom-hello-impl-application/), Path(/system/sharding/kafkaProducer-greetingsCoordinator/singleton/coordinator)])], but no acknowledgement. Total [1] buffered messages. [warn] a.c.s.ShardRegion - Trying to register to coordinator at [Some(ActorSelection[Anchor(akka://lagom-hello-impl-application/), Path(/system/sharding/kafkaProducer-greetingsCoordinator/singleton/coordinator)])], but no acknowledgement. Total [1] buffered messages. [warn] a.c.s.ShardRegion - Trying to register to coordinator at [Some(ActorSelection[Anchor(akka://lagom-hello-impl-application/), Path(/system/sharding/kafkaProducer-greetingsCoordinator/singleton/coordinator)])], but no acknowledgement. Total [1] buffered messages. [warn] a.c.s.ShardRegion - Retry request for shard [singleton] homes from coordinator at [Actor[akka://lagom-hello-impl-application/system/sharding/kafkaProducer-greetingsCoordinator/singleton/coordinator#183754478]]. [1] buffered messages. This output is not there if the example is working (i.e. on Win10, and Ubuntu). Expected results: Directing browser to http://localhost:9000/api/hello/World will display 'Hello, word!' Additional info: First reported to the lagom list at https://groups.google.com/forum/#!topic/lagom-framework/kpNCDCQgQp8 . I also turned on firewall logging - but couldn't find any hint in the logs. I disabled the firewall (systemctl stop firewalld) and selinux altogether (setenforce 0) - but the problem is still there. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1443409] New: jenkins-task-reactor: Running arbitrary Groovy code in Jenskin JVM via Reactor Event ( SECURITY-487)
by bugzilla＠redhat.com 14 Jul '17

14 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1443409 Bug ID: 1443409 Summary: jenkins-task-reactor: Running arbitrary Groovy code in Jenskin JVM via Reactor Event (SECURITY-487) Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com, dedgar(a)redhat.com, dmcphers(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jgoulding(a)redhat.com, jkeck(a)redhat.com, joelsmith(a)redhat.com, kseifried(a)redhat.com, mizdebsk(a)redhat.com, msrb(a)redhat.com, tdawson(a)redhat.com Reactor plugin allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM by defining a Reactor Script that will be run when a Reactor Event triggers, effectively elevating privileges to Overall/Run Scripts. Affects all versions. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1372124] CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack
by bugzilla＠redhat.com 14 Jul '17

14 Jul '17

https://bugzilla.redhat.com/show_bug.cgi?id=1372124 Kurt Seifried <kseifried(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1471278, 1471277 --- Comment #6 from Kurt Seifried <kseifried(a)redhat.com> --- Created resteasy tracking bugs for this issue: Affects: fedora-all [bug 1471277] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1471277 [Bug 1471277] CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack [fedora-all] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1372124] CVE-2016-6347 RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack
by bugzilla＠redhat.com 14 Jul '17

14 Jul '17

1 0

Broken dependencies: aether-ant-tasks
by buildsys＠fedoraproject.org 14 Jul '17

14 Jul '17

1 0

[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla＠redhat.com 13 Jul '17

13 Jul '17

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits July 2017