java-sig-commits August 2021

java-sig-commits@lists.fedoraproject.org

1 participants
320 discussions

[Bug 1719748] New: jetty-9.4.19.v20190610 is available
by bugzilla＠redhat.com 03 Jun '24

03 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=1719748 Bug ID: 1719748 Summary: jetty-9.4.19.v20190610 is available Product: Fedora Version: rawhide Status: NEW Component: jetty Keywords: FutureFeature, Triaged Assignee: mat.booth(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 9.4.19.v20190610 Current version/release in rawhide: 9.4.18-2.v20190429.fc31 URL: http://www.eclipse.org/jetty Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1447/ -- You are receiving this mail because: You are on the CC list for the bug.

1 42

[Bug 1870860] New: auto-1.7.4 is available
by bugzilla＠redhat.com 02 Jun '24

02 Jun '24

https://bugzilla.redhat.com/show_bug.cgi?id=1870860 Bug ID: 1870860 Summary: auto-1.7.4 is available Product: Fedora Version: rawhide Status: NEW Component: auto Keywords: FutureFeature, Triaged Assignee: mat.booth(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, mat.booth(a)redhat.com, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Latest upstream release: 1.7.4 Current version/release in rawhide: 1.5.4-4.fc33 URL: https://github.com/google/auto Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/6371/ -- You are receiving this mail because: You are on the CC list for the bug.

1 33

[Bug 1884968] New: cdi-api-2.0.1 is available
by bugzilla＠redhat.com 01 Mar '24

01 Mar '24

https://bugzilla.redhat.com/show_bug.cgi?id=1884968 Bug ID: 1884968 Summary: cdi-api-2.0.1 is available Product: Fedora Version: rawhide Status: NEW Component: cdi-api Keywords: FutureFeature, Triaged Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: decathorpe(a)gmail.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Latest upstream release: 2.0.1 Current version/release in rawhide: 2.0-1.fc34 URL: http://cdi-spec.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/20387/ -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1955739] New: CVE-2021-26291 maven: Block repositories using http by default
by bugzilla＠redhat.com 12 Feb '24

12 Feb '24

https://bugzilla.redhat.com/show_bug.cgi?id=1955739 Bug ID: 1955739 Summary: CVE-2021-26291 maven: Block repositories using http by default Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: aboyko(a)redhat.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, asoldano(a)redhat.com, atangrin(a)redhat.com, bbaranow(a)redhat.com, bmaxwell(a)redhat.com, brian.stansberry(a)redhat.com, cdewolf(a)redhat.com, chazlett(a)redhat.com, darran.lofthouse(a)redhat.com, dkreling(a)redhat.com, dosoudil(a)redhat.com, eleandro(a)redhat.com, etirelli(a)redhat.com, fjuma(a)redhat.com, gvarsami(a)redhat.com, ibek(a)redhat.com, iweiss(a)redhat.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jcoleman(a)redhat.com, jochrist(a)redhat.com, jperkins(a)redhat.com, jstastny(a)redhat.com, jwon(a)redhat.com, kaycoth(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, kwills(a)redhat.com, ldimaggi(a)redhat.com, lgao(a)redhat.com, mizdebsk(a)redhat.com, mnovotny(a)redhat.com, msochure(a)redhat.com, msrb(a)redhat.com, msvehla(a)redhat.com, nwallace(a)redhat.com, pjindal(a)redhat.com, pmackay(a)redhat.com, rguimara(a)redhat.com, rrajasek(a)redhat.com, rstancel(a)redhat.com, rsvoboda(a)redhat.com, rwagner(a)redhat.com, smaestri(a)redhat.com, sochotni(a)redhat.com, tcunning(a)redhat.com, tkirby(a)redhat.com, tom.jenkinson(a)redhat.com, tzimanyi(a)redhat.com, yborgess(a)redhat.com Target Milestone: --- Classification: Other Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. References: https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fd… https://lists.apache.org/thread.html/r06db4057b74e0598a412734f693a34a8836ac… https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fd… http://www.openwall.com/lists/oss-security/2021/04/23/5 https://lists.apache.org/thread.html/r0556ce5db7231025785477739ee416b169d8a… https://lists.apache.org/thread.html/ra88a0eba7f84658cefcecc0143fd8bbad52c2… https://lists.apache.org/thread.html/r3f0450dcab7e63b5f233ccfbc6fca5f1867a7… -- You are receiving this mail because: You are on the CC list for the bug.

1 32

[Bug 1801149] New: CVE-2019-13990 libquartz-java: XXE attacks via job description
by bugzilla＠redhat.com 02 Feb '24

02 Feb '24

https://bugzilla.redhat.com/show_bug.cgi?id=1801149 Bug ID: 1801149 Summary: CVE-2019-13990 libquartz-java: XXE attacks via job description Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: darunesh(a)redhat.com CC: agrimm(a)gmail.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bkearney(a)redhat.com, btotty(a)redhat.com, chazlett(a)redhat.com, dblechte(a)redhat.com, dfediuck(a)redhat.com, drieden(a)redhat.com, eedri(a)redhat.com, etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org, ggaughan(a)redhat.com, gvarsami(a)redhat.com, hhudgeon(a)redhat.com, ibek(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jcoleman(a)redhat.com, jochrist(a)redhat.com, jstastny(a)redhat.com, jwon(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, ldimaggi(a)redhat.com, lef(a)fedoraproject.org, lzap(a)redhat.com, mgoldboi(a)redhat.com, michal.skrivanek(a)redhat.com, mmccune(a)redhat.com, mnovotny(a)redhat.com, nwallace(a)redhat.com, paradhya(a)redhat.com, pjindal(a)redhat.com, puntogil(a)libero.it, rchan(a)redhat.com, rjerrido(a)redhat.com, rrajasek(a)redhat.com, rsynek(a)redhat.com, rwagner(a)redhat.com, sbonazzo(a)redhat.com, sdaley(a)redhat.com, sherold(a)redhat.com, sokeeffe(a)redhat.com, tbrisker(a)redhat.com, tcunning(a)redhat.com, tkirby(a)redhat.com, tlestach(a)redhat.com, yturgema(a)redhat.com Target Milestone: --- Classification: Other A vulnerability was found in initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description. Reference: https://github.com/quartz-scheduler/quartz/issues/467 https://lists.apache.org/thread.html/172d405e556e2f1204be126bb3eb28c5115af9… https://lists.apache.org/thread.html/1870324fea41ea68cff2fd1bf6ee2747432dc1… https://lists.apache.org/thread.html/6b6e3480b19856365fb5eef03aa0915a4679de… https://lists.apache.org/thread.html/e493e718a50f21201e05e82d42a8796b4046e8… https://lists.apache.org/thread.html/f74b170d3d58d7a24db1afd3908bb0ab58a390… -- You are receiving this mail because: You are on the CC list for the bug.

1 27

[Bug 1694308] New: httpcomponents-client-4.5.8 is available
by bugzilla＠redhat.com 31 Jan '24

31 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=1694308 Bug ID: 1694308 Summary: httpcomponents-client-4.5.8 is available Product: Fedora Version: rawhide Status: NEW Component: httpcomponents-client Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Latest upstream release: 4.5.8 Current version/release in rawhide: 4.5.6-3.fc30 URL: http://www.apache.org/dist/httpcomponents/httpclient/source/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1334/ -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1978762] New: slf4j-2.0.0-alpha2 is available
by bugzilla＠redhat.com 04 Jan '24

04 Jan '24

https://bugzilla.redhat.com/show_bug.cgi?id=1978762 Bug ID: 1978762 Summary: slf4j-2.0.0-alpha2 is available Product: Fedora Version: rawhide Status: NEW Component: slf4j Keywords: FutureFeature, Triaged Assignee: mizdebsk(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: alexander.m.scheel(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, jmagne(a)redhat.com, mizdebsk(a)redhat.com, mkdineshprasanth(a)gmail.com Target Milestone: --- Classification: Fedora Latest upstream release: 2.0.0-alpha2 Current version/release in rawhide: 1.7.30-9.fc35 URL: http://www.slf4j.org/download.html Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/4831/ -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1955315] New: mockito-3.9.10 is available
by bugzilla＠redhat.com 15 Dec '23

15 Dec '23

https://bugzilla.redhat.com/show_bug.cgi?id=1955315 Bug ID: 1955315 Summary: mockito-3.9.10 is available Product: Fedora Version: rawhide Status: NEW Component: mockito Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, mat.booth(a)gmail.com, mizdebsk(a)redhat.com, projects.rg(a)smart.ms, roman(a)fenkhuber.at, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Latest upstream release: 3.9.10 Current version/release in rawhide: 3.5.13-2.fc34 URL: http://mockito.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/7297/ -- You are receiving this mail because: You are on the CC list for the bug.

1 40

[Bug 1748421] New: httpcomponents-core-4.4.12 is available
by bugzilla＠redhat.com 27 Nov '23

27 Nov '23

https://bugzilla.redhat.com/show_bug.cgi?id=1748421 Bug ID: 1748421 Summary: httpcomponents-core-4.4.12 is available Product: Fedora Version: rawhide Status: NEW Component: httpcomponents-core Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Latest upstream release: 4.4.12 Current version/release in rawhide: 4.4.10-6.fc31 URL: http://www.apache.org/dist/httpcomponents/httpcore/source/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1333/ -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1978932] New: plexus-velocity-1.3 is available
by bugzilla＠redhat.com 01 Oct '23

01 Oct '23

https://bugzilla.redhat.com/show_bug.cgi?id=1978932 Bug ID: 1978932 Summary: plexus-velocity-1.3 is available Product: Fedora Version: rawhide Status: NEW Component: plexus-velocity Keywords: FutureFeature, Triaged Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jaromir.capik(a)email.cz, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, markku.korkeala(a)kapsi.fi, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.3 Current version/release in rawhide: 1.2-12.fc34 URL: https://codehaus-plexus.github.io/plexus-velocity/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/3664/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits August 2021