java-sig-commits June 2020

java-sig-commits@lists.fedoraproject.org

1 participants
390 discussions

[Bug 1806398] CVE-2020-1938 tomcat: Apache Tomcat AJP File Read/Inclusion Vulnerability
by bugzilla＠redhat.com 29 Jun '20

29 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1806398 Kunjan Rathod <krathod(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1806501 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1805501] CVE-2020-10693 hibernate-validator: Improper input validation in the interpolation of constraint error messages
by bugzilla＠redhat.com 29 Jun '20

29 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1805501 --- Comment #21 from Ted (Jong Seok) Won <jwon(a)redhat.com> --- Mitigation: You can pass user input as an expression variable by unwrapping the context to HibernateConstraintValidatorContext. Please refer to the https://in.relation.to/2020/05/07/hibernate-validator-615-6020-released/ and https://docs.jboss.org/hibernate/stable/validator/reference/en-US/html_sing…. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1763544] javacc-7.0.9 is available
by bugzilla＠redhat.com 26 Jun '20

26 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1763544 Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|javacc-7.0.5 is available |javacc-7.0.9 is available --- Comment #4 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- Latest upstream release: 7.0.9 Current version/release in rawhide: 7.0.4-4.fc32 URL: http://javacc.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1422/ --- Comment #5 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- An HTTP error occurred downloading the package's new Source URLs: Getting https://github.com/javacc/javacc/archive/7.0.9.tar.gz to ./7.0.9.tar.gz -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1508123] CVE-2016-5003 xmlrpc: Deserialization of untrusted Java object through <ex:serializable> tag
by bugzilla＠redhat.com 25 Jun '20

25 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1508123 --- Comment #17 from msiddiqu(a)redhat.com --- Upstream Patch: https://src.fedoraproject.org/rpms/xmlrpc/c/ef4efbf91d241070f6f41950f753604… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1508110] CVE-2016-5002 xmlrpc: XML external entity vulnerability SSRF via a crafted DTD
by bugzilla＠redhat.com 25 Jun '20

25 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1508110 --- Comment #7 from msiddiqu(a)redhat.com --- Upstream Patch: https://src.fedoraproject.org/rpms/xmlrpc/c/2db59ec8a8b4d358802e98ce0151af8… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 652183] Java SIG tracker bug
by bugzilla＠redhat.com 24 Jun '20

24 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=652183 Bug 652183 depends on bug 1111373, which changed state. Bug 1111373 Summary: Review Request: ant18 - ant version 1.8 for EL6 https://bugzilla.redhat.com/show_bug.cgi?id=1111373 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1844885] New: tomcat-9.0.36 is available
by bugzilla＠redhat.com 22 Jun '20

22 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1844885 Bug ID: 1844885 Summary: tomcat-9.0.36 is available Product: Fedora Version: rawhide Status: NEW Component: tomcat Keywords: FutureFeature, Triaged Assignee: ivan.afonichev(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, coolsvap(a)gmail.com, csutherl(a)redhat.com, huwang(a)redhat.com, ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com Target Milestone: --- Classification: Fedora Latest upstream release: 9.0.36 Current version/release in rawhide: 9.0.35-2.fc33 URL: http://tomcat.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/17032/ -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1838964] New: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence [fedora-all]
by bugzilla＠redhat.com 22 Jun '20

22 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1838964 Bug ID: 1838964 Summary: CVE-2020-9484 tomcat: Apache Tomcat Remote Code Execution via session persistence [fedora-all] Product: Fedora Version: 32 Status: NEW Component: tomcat Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: ivan.afonichev(a)gmail.com Reporter: thoger(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, coolsvap(a)gmail.com, csutherl(a)redhat.com, ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1847885] Failed to build rpms for tomcat 8.5.56 source code.
by bugzilla＠redhat.com 22 Jun '20

22 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1847885 Coty Sutherland <csutherl(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |CURRENTRELEASE Last Closed| |2020-06-22 12:52:49 --- Comment #6 from Coty Sutherland <csutherl(a)redhat.com> --- Since you got it working now I'm going to go ahead and close this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1844860] New: pdfbox-2.0.20 is available
by bugzilla＠redhat.com 20 Jun '20

20 Jun '20

https://bugzilla.redhat.com/show_bug.cgi?id=1844860 Bug ID: 1844860 Summary: pdfbox-2.0.20 is available Product: Fedora Version: rawhide Status: NEW Component: pdfbox Keywords: FutureFeature, Triaged Assignee: sergio(a)serjux.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it, sergio(a)serjux.com Target Milestone: --- Classification: Fedora Latest upstream release: 2.0.20 Current version/release in rawhide: 2.0.19-1.fc33 URL: http://pdfbox.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/9648/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

← Newer
1
...
28
29
30
31
32
33
34
...
39
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits June 2020