java-sig-commits March 2016

java-sig-commits@lists.fedoraproject.org

3 participants
219 discussions

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 22 Mar '16

22 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 Bug 652183 depends on bug 1318363, which changed state. Bug 1318363 Summary: Review Request: eclipse-epp-logging - Eclipse Error Reporting tool https://bugzilla.redhat.com/show_bug.cgi?id=1318363 What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution|--- |RAWHIDE -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 18 Mar '16

18 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1318988 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1318988 [Bug 1318988] Review Request: java-1.8.0-openjdk-aarch32 - OpenJDK AArch32 porting project preview release -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1311952] New: CVE-2016-0792 jenkins: Remote code execution through remote API (SECURITY-247) [fedora-all]
by Red Hat Bugzilla 17 Mar '16

17 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=1311952 Bug ID: 1311952 Summary: CVE-2016-0792 jenkins: Remote code execution through remote API (SECURITY-247) [fedora-all] Product: Fedora Version: 23 Component: jenkins Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: msrb(a)redhat.com Reporter: anemec(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Blocks: 1311950 (CVE-2016-0792) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1311950 [Bug 1311950] CVE-2016-0792 jenkins: Remote code execution through remote API (SECURITY-247) -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1311132] New: Error using Cobertura plugin with Fedora 23 jenkins
by Red Hat Bugzilla 17 Mar '16

17 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=1311132 Bug ID: 1311132 Summary: Error using Cobertura plugin with Fedora 23 jenkins Product: Fedora Version: 23 Component: jenkins Severity: medium Assignee: msrb(a)redhat.com Reporter: aconole(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Description of problem: Cobertura plugin fails with the fedora23 bundled jenkins Version-Release number of selected component (if applicable): Jenkins - 1.625.3 Cobertura plugin - 1.9.7 How reproducible: Very Steps to Reproduce: 1. installed jenkins from the Fedora 23 repository. 2. installed cobertura plugin, and git client plugin 3. Added a single job building a c/makefile project (openvswitch). 4. Used gcovr to make a cobertura coverage.xml file from the unit test output 5. Added 'Publish Cobertura Coverage results' post-build action Actual results: Got the following exception: Running gcov: 'gcov /var/lib/jenkins/jobs/openvswitch-build/workspace/lib/dirs.gcda --branch-counts --branch-probabilities --preserve-paths --object-directory /var/lib/jenkins/jobs/openvswitch-build/workspace/lib' in '/var/lib/jenkins/jobs/openvswitch-build/workspace/lib' Parsing coverage data for file /var/lib/jenkins/jobs/openvswitch-build/workspace/lib/dirs.c.in Parsing coverage data for file /var/lib/jenkins/jobs/openvswitch-build/workspace/include/openvswitch/thread.h Gathered coveraged data for 302 files [Cobertura] Publishing Cobertura coverage report... ERROR: Step ‘Publish Cobertura Coverage Report’ aborted due to exception: java.lang.NoClassDefFoundError: org/codehaus/stax2/XMLInputFactory2 at java.lang.ClassLoader.defineClass1(Native Method) at java.lang.ClassLoader.defineClass(ClassLoader.java:760) at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142) at java.net.URLClassLoader.defineClass(URLClassLoader.java:467) at java.net.URLClassLoader.access$100(URLClassLoader.java:73) at java.net.URLClassLoader$1.run(URLClassLoader.java:368) at java.net.URLClassLoader$1.run(URLClassLoader.java:362) at java.security.AccessController.doPrivileged(Native Method) at java.net.URLClassLoader.findClass(URLClassLoader.java:361) at org.eclipse.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:421) at org.eclipse.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:383) at java.lang.Class.forName0(Native Method) at java.lang.Class.forName(Class.java:348) at java.util.ServiceLoader$LazyIterator.nextService(ServiceLoader.java:370) at java.util.ServiceLoader$LazyIterator.next(ServiceLoader.java:404) at java.util.ServiceLoader$1.next(ServiceLoader.java:480) at javax.xml.stream.FactoryFinder$1.run(FactoryFinder.java:353) at java.security.AccessController.doPrivileged(Native Method) at javax.xml.stream.FactoryFinder.findServiceProvider(FactoryFinder.java:341) at javax.xml.stream.FactoryFinder.find(FactoryFinder.java:313) at javax.xml.stream.FactoryFinder.find(FactoryFinder.java:227) at javax.xml.stream.XMLInputFactory.newInstance(XMLInputFactory.java:154) at hudson.plugins.cobertura.CoberturaPublisher$ParseReportCallable.invoke(CoberturaPublisher.java:538) at hudson.plugins.cobertura.CoberturaPublisher$ParseReportCallable.invoke(CoberturaPublisher.java:525) at hudson.FilePath.act(FilePath.java:991) at hudson.FilePath.act(FilePath.java:969) at hudson.plugins.cobertura.CoberturaPublisher.perform(CoberturaPublisher.java:343) at hudson.tasks.BuildStepMonitor$3.perform(BuildStepMonitor.java:45) at hudson.model.AbstractBuild$AbstractBuildExecution.perform(AbstractBuild.java:785) at hudson.model.AbstractBuild$AbstractBuildExecution.performAllBuildSteps(AbstractBuild.java:726) at hudson.model.Build$BuildExecution.post2(Build.java:185) at hudson.model.AbstractBuild$AbstractBuildExecution.post(AbstractBuild.java:671) at hudson.model.Run.execute(Run.java:1766) at hudson.model.FreeStyleBuild.run(FreeStyleBuild.java:43) at hudson.model.ResourceController.execute(ResourceController.java:98) at hudson.model.Executor.run(Executor.java:408) Caused by: java.lang.ClassNotFoundException: org.codehaus.stax2.XMLInputFactory2 at java.net.URLClassLoader.findClass(URLClassLoader.java:381) at java.lang.ClassLoader.loadClass(ClassLoader.java:424) at java.lang.ClassLoader.loadClass(ClassLoader.java:357) at org.eclipse.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:430) at org.eclipse.jetty.webapp.WebAppClassLoader.loadClass(WebAppClassLoader.java:383) ... 36 more Finished: FAILURE Expected results: Cobertura plugin would be able to run with all dependencies satisfied Additional info: Installing Jenkins from the official repo fixed this problem. I tried the following (before making that change): * Modifying the cobertura plugin pom.xml to include the stax2 dependency * Adding the stax2 jar contents to the plugin classes/ directory * Adding the stax2 jar to the plugin lib/ directory * Uninstalling/reinstalling the cobertura plugin -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 17 Mar '16

17 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 Bug 652183 depends on bug 1305496, which changed state. Bug 1305496 Summary: Review Request: HdrHistogram - A High Dynamic Range Histogram https://bugzilla.redhat.com/show_bug.cgi?id=1305496 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 16 Mar '16

16 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1318363 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1318363 [Bug 1318363] Review Request: eclipse-epp-logging - Eclipse Error Reporting tool -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1317522] New: CVE-2016-0734 CVE-2016-0782 activemq: various flaws [fedora-all]
by Red Hat Bugzilla 14 Mar '16

14 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=1317522 Bug ID: 1317522 Summary: CVE-2016-0734 CVE-2016-0782 activemq: various flaws [fedora-all] Product: Fedora Version: 23 Component: activemq Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: puntogil(a)libero.it Reporter: amaris(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: agrimm(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it, s(a)shk.io, tdawson(a)redhat.com Blocks: 1317516 (CVE-2016-0782), 1317520 (CVE-2016-0734) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. [bug automatically created by: add-tracking-bugs] Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1317516 [Bug 1317516] CVE-2016-0782 activemq: Cross-site scripting vulnerabilities in web console https://bugzilla.redhat.com/show_bug.cgi?id=1317520 [Bug 1317520] CVE-2016-0734 activemq: Clickjacking in Web Console -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 11 Mar '16

11 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1316195 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1316195 [Bug 1316195] Review Request: arquillian-core - Arquillian is a revolutionary testing platform built on the JVM -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1315677] New: jenkins-remoting-2.56 is available
by Red Hat Bugzilla 11 Mar '16

11 Mar '16

https://bugzilla.redhat.com/show_bug.cgi?id=1315677 Bug ID: 1315677 Summary: jenkins-remoting-2.56 is available Product: Fedora Version: rawhide Component: jenkins-remoting Keywords: FutureFeature, Triaged Assignee: msrb(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Latest upstream release: 2.56 Current version/release in rawhide: 2.55-1.fc25 URL: https://github.com/jenkinsci/remoting Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1129074] CVE-2014-3577 Apache HttpComponents client / Apache CXF: SSL hostname verification bypass, incomplete CVE-2012-6153 fix
by Red Hat Bugzilla 10 Mar '16

10 Mar '16

1 0

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits March 2016