java-sig-commits October 2019

java-sig-commits@lists.fedoraproject.org

1 participants
505 discussions

[Bug 1719748] New: jetty-9.4.19.v20190610 is available
by bugzilla＠redhat.com 03 Jun '24

03 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=1719748 Bug ID: 1719748 Summary: jetty-9.4.19.v20190610 is available Product: Fedora Version: rawhide Status: NEW Component: jetty Keywords: FutureFeature, Triaged Assignee: mat.booth(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 9.4.19.v20190610 Current version/release in rawhide: 9.4.18-2.v20190429.fc31 URL: http://www.eclipse.org/jetty Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1447/ -- You are receiving this mail because: You are on the CC list for the bug.

1 42

[Bug 1694308] New: httpcomponents-client-4.5.8 is available
by bugzilla＠redhat.com 31 Jan '24

31 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=1694308 Bug ID: 1694308 Summary: httpcomponents-client-4.5.8 is available Product: Fedora Version: rawhide Status: NEW Component: httpcomponents-client Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Latest upstream release: 4.5.8 Current version/release in rawhide: 4.5.6-3.fc30 URL: http://www.apache.org/dist/httpcomponents/httpclient/source/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1334/ -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1748421] New: httpcomponents-core-4.4.12 is available
by bugzilla＠redhat.com 27 Nov '23

27 Nov '23

https://bugzilla.redhat.com/show_bug.cgi?id=1748421 Bug ID: 1748421 Summary: httpcomponents-core-4.4.12 is available Product: Fedora Version: rawhide Status: NEW Component: httpcomponents-core Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Latest upstream release: 4.4.12 Current version/release in rawhide: 4.4.10-6.fc31 URL: http://www.apache.org/dist/httpcomponents/httpcore/source/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1333/ -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1694474] New: velocity-2.1 is available
by bugzilla＠redhat.com 26 Aug '23

26 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=1694474 Bug ID: 1694474 Summary: velocity-2.1 is available Product: Fedora Version: rawhide Status: NEW Component: velocity Keywords: FutureFeature, Triaged Assignee: mhroncok(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dbhole(a)redhat.com, devrim(a)gunduz.org, java-sig-commits(a)lists.fedoraproject.org, mhroncok(a)redhat.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 2.1 Current version/release in rawhide: 1.7-25.fc30 URL: http://www.apache.org/dist/velocity/engine/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/5083/ -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1720601] New: javapackages-tools-5.3.1 is available
by bugzilla＠redhat.com 26 Aug '23

26 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=1720601 Bug ID: 1720601 Summary: javapackages-tools-5.3.1 is available Product: Fedora Version: rawhide Status: NEW Component: javapackages-tools Keywords: FutureFeature, Triaged Assignee: mizdebsk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, msrb(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 5.3.1 Current version/release in rawhide: 5.3.0-4.fc30 URL: https://github.com/fedora-java/javapackages Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/15556/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1688070] New: takari-incrementalbuild-0.20.9 is available
by bugzilla＠redhat.com 26 Aug '23

26 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=1688070 Bug ID: 1688070 Summary: takari-incrementalbuild-0.20.9 is available Product: Fedora Version: rawhide Status: NEW Component: takari-incrementalbuild Keywords: FutureFeature, Triaged Assignee: extras-orphan(a)fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dingyichen(a)gmail.com, extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 0.20.9 Current version/release in rawhide: 0.20.7-3.fc30 URL: http://takari.io Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/9579/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1736921] New: truth: FTBFS in Fedora rawhide/f31
by bugzilla＠redhat.com 24 May '23

24 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=1736921 Bug ID: 1736921 Summary: truth: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: truth Assignee: noa(a)resare.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, noa(a)resare.com Blocks: 1732841 Target Milestone: --- Classification: Fedora truth failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36637892 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix truth at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, truth will be orphaned. Before branching of Fedora 32, truth will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1691424] New: maven-scm-1.11.2 is available
by bugzilla＠redhat.com 10 Feb '23

10 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=1691424 Bug ID: 1691424 Summary: maven-scm-1.11.2 is available Product: Fedora Version: rawhide Status: NEW Component: maven-scm Keywords: FutureFeature, Triaged Assignee: guido.grazioli(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dbhole(a)redhat.com, guido.grazioli(a)gmail.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.11.2 Current version/release in rawhide: 1.10.0-4.fc30 URL: http://repo2.maven.org/maven2/org/apache/maven/scm/maven-scm/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1934/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1745960] New: Request to build tomcat for EPEL 8
by bugzilla＠redhat.com 12 Sep '22

12 Sep '22

https://bugzilla.redhat.com/show_bug.cgi?id=1745960 Bug ID: 1745960 Summary: Request to build tomcat for EPEL 8 Product: Fedora EPEL Version: el6 Status: NEW Component: tomcat Assignee: ivan.afonichev(a)gmail.com Reporter: adam.winberg(a)smhi.se QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, coolsvap(a)gmail.com, csutherl(a)redhat.com, ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com Target Milestone: --- Classification: Fedora Tomcat is not available from official Red Hat repos in RHEL8, so no conflict should exist? -- You are receiving this mail because: You are on the CC list for the bug.

1 11

[Bug 1764658] New: CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source
by bugzilla＠redhat.com 27 Apr '22

27 Apr '22

https://bugzilla.redhat.com/show_bug.cgi?id=1764658 Bug ID: 1764658 Summary: CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: agrimm(a)gmail.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, asoldano(a)redhat.com, atangrin(a)redhat.com, avibelli(a)redhat.com, bbaranow(a)redhat.com, bgeorges(a)redhat.com, bmaxwell(a)redhat.com, brian.stansberry(a)redhat.com, caolanm(a)redhat.com, cdewolf(a)redhat.com, chazlett(a)redhat.com, darran.lofthouse(a)redhat.com, dosoudil(a)redhat.com, drieden(a)redhat.com, etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org, ggaughan(a)redhat.com, gvarsami(a)redhat.com, ibek(a)redhat.com, i.gnatenko.brain(a)gmail.com, iweiss(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jawilson(a)redhat.com, jbalunas(a)redhat.com, jcoleman(a)redhat.com, jhrozek(a)redhat.com, jochrist(a)redhat.com, jolee(a)redhat.com, jpallich(a)redhat.com, jperkins(a)redhat.com, jschatte(a)redhat.com, jstastny(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, kwills(a)redhat.com, ldimaggi(a)redhat.com, lef(a)fedoraproject.org, lgao(a)redhat.com, loleary(a)redhat.com, lthon(a)redhat.com, mnovotny(a)redhat.com, msochure(a)redhat.com, msvehla(a)redhat.com, mszynkie(a)redhat.com, nwallace(a)redhat.com, paradhya(a)redhat.com, pdrozd(a)redhat.com, pgallagh(a)redhat.com, pmackay(a)redhat.com, psotirop(a)redhat.com, puntogil(a)libero.it, rguimara(a)redhat.com, rrajasek(a)redhat.com, rruss(a)redhat.com, rsvoboda(a)redhat.com, rsynek(a)redhat.com, rwagner(a)redhat.com, sdaley(a)redhat.com, smaestri(a)redhat.com, spinder(a)redhat.com, ssorce(a)redhat.com, sthorger(a)redhat.com, tcunning(a)redhat.com, theute(a)redhat.com, tkirby(a)redhat.com, tom.jenkinson(a)redhat.com, trogers(a)redhat.com, twalsh(a)redhat.com, veillard(a)redhat.com, vhalbert(a)redhat.com Target Milestone: --- Classification: Other In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4. References: http://santuario.apache.org/secadv.data/CVE-2019-12400.asc?version=1&modifi… https://lists.apache.org/thread.html/8e814b925bf580bc527d96ff51e72ffe5bdeaa… https://lists.apache.org/thread.html/edaa7edb9c58e5f5bd0c950f2b6232b62b15f5… https://security.netapp.com/advisory/ntap-20190910-0003/ -- You are receiving this mail because: You are on the CC list for the bug.

1 25

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits October 2019