java-sig-commits May 2016

java-sig-commits@lists.fedoraproject.org

1 participants
223 discussions

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 Mikolaj Izdebski <mizdebsk(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1339232 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1339232 [Bug 1339232] Review Request: aws-sdk-java - AWS SDK for Java -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1339318 Bug 1339318 depends on bug 1339320, which changed state. Bug 1339320 Summary: CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1339320 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |NOTABUG -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1339318 --- Comment #2 from Adam Mariš <amaris(a)redhat.com> --- Created activemq tracking bugs for this issue: Affects: fedora-all [bug 1339320] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1339318 Adam Mariš <amaris(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1339319 Depends On| |1339320 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1339320 [Bug 1339320] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE [fedora-all] -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1337168] New: jsoup-1.9.2 is available
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1337168 Bug ID: 1337168 Summary: jsoup-1.9.2 is available Product: Fedora Version: rawhide Component: jsoup Keywords: FutureFeature, Triaged Assignee: msimacek(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msimacek(a)redhat.com, msrb(a)redhat.com Latest upstream release: 1.9.2 Current version/release in rawhide: 1.9.1-1.fc25 URL: http://jsoup.org/download Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1479/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 24 May '16

24 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1339232 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1339232 [Bug 1339232] Review Request: aws-sdk-java - AWS SDK for Java -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1335336] New: jenkins-remoting-2.58 is available
by Red Hat Bugzilla 20 May '16

20 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1335336 Bug ID: 1335336 Summary: jenkins-remoting-2.58 is available Product: Fedora Version: rawhide Component: jenkins-remoting Keywords: FutureFeature, Triaged Assignee: msrb(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Latest upstream release: 2.58 Current version/release in rawhide: 2.57-1.fc25 URL: https://github.com/jenkinsci/remoting Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1444/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1337730] New: maven-resources-plugin-3.0.0 is available
by Red Hat Bugzilla 20 May '16

20 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1337730 Bug ID: 1337730 Summary: maven-resources-plugin-3.0.0 is available Product: Fedora Version: rawhide Component: maven-resources-plugin Keywords: FutureFeature, Triaged Assignee: huwang(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, huwang(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, pingou(a)pingoured.fr, weli(a)redhat.com, yyang(a)redhat.com Latest upstream release: 3.0.0 Current version/release in rawhide: 2.7-4.fc24 URL: http://repo2.maven.org/maven2/org/apache/maven/plugins/maven-resources-plug… Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1933/ -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1337167] New: jsonld-java-v0.8.3 is available
by Red Hat Bugzilla 18 May '16

18 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1337167 Bug ID: 1337167 Summary: jsonld-java-v0.8.3 is available Product: Fedora Version: rawhide Component: jsonld-java Keywords: FutureFeature, Triaged Assignee: puntogil(a)libero.it Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Latest upstream release: v0.8.3 Current version/release in rawhide: 0.8.0-1.fc24 URL: https://github.com/jsonld-java/jsonld-java/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/7681/ -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1326403] New: CVE-2016-3102 jenkins: Groovy sandbox protection incomplete in Script Security Plugin (SECURITY-258)
by Red Hat Bugzilla 17 May '16

17 May '16

https://bugzilla.redhat.com/show_bug.cgi?id=1326403 Bug ID: 1326403 Summary: CVE-2016-3102 jenkins: Groovy sandbox protection incomplete in Script Security Plugin (SECURITY-258) Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: abhgupta(a)redhat.com, bleanhar(a)redhat.com, ccoleman(a)redhat.com, dmcphers(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jialiu(a)redhat.com, jkeck(a)redhat.com, joelsmith(a)redhat.com, jokerman(a)redhat.com, kseifried(a)redhat.com, lmeyer(a)redhat.com, mizdebsk(a)redhat.com, mmccomas(a)redhat.com, msrb(a)redhat.com, tiwillia(a)redhat.com The following flaw was found in Jenkins: The Script Security plugin provides a Groovy sandbox implementation to other plugins that only allows whitelisted commands to be executed. This sandbox did not cover direct field access (foo.@bar) or get/set array operations (foo[bar]). External References: https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2016… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

← Newer
1
...
15
16
17
18
19
20
21
22
23
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits May 2016