February 2021 - java-sig-commits - Fedora Mailing-Lists

[Bug 1923444] New: felix-bundlerepository: FTBFS in Fedora rawhide/f34

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1923444 Bug ID: 1923444 Summary: felix-bundlerepository: FTBFS in Fedora rawhide/f34 Product: Fedora Version: rawhide Status: NEW Component: felix-bundlerepository Assignee: stewardship-sig(a)lists.fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: decathorpe(a)gmail.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, jjelen(a)redhat.com, mizdebsk(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Blocks: 1868278 (F34FTBFS) Target Milestone: --- Classification: Fedora felix-bundlerepository failed to build from source in Fedora rawhide/f34 https://koji.fedoraproject.org/koji/taskinfo?taskID=60910565 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Please fix felix-bundlerepository at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, felix-bundlerepository will be orphaned. Before branching of Fedora 35, felix-bundlerepository will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai... Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1868278 [Bug 1868278] (F34FTBFS) - Fedora 34 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
11
0 / 0

[Bug 1923382] New: simple-jndi: FTBFS in Fedora rawhide/f34

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1923382 Bug ID: 1923382 Summary: simple-jndi: FTBFS in Fedora rawhide/f34 Product: Fedora Version: rawhide Status: NEW Component: simple-jndi Assignee: jjelen(a)redhat.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jjelen(a)redhat.com, puntogil(a)libero.it Blocks: 1868278 (F34FTBFS) Target Milestone: --- Classification: Fedora simple-jndi failed to build from source in Fedora rawhide/f34 https://koji.fedoraproject.org/koji/taskinfo?taskID=60908695 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Please fix simple-jndi at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, simple-jndi will be orphaned. Before branching of Fedora 35, simple-jndi will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai... Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1868278 [Bug 1868278] (F34FTBFS) - Fedora 34 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
14
0 / 0

[Bug 1923381] New: geronimo-validation: FTBFS in Fedora rawhide/f34

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1923381 Bug ID: 1923381 Summary: geronimo-validation: FTBFS in Fedora rawhide/f34 Product: Fedora Version: rawhide Status: NEW Component: geronimo-validation Assignee: jjelen(a)redhat.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: agrimm(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, jjelen(a)redhat.com, puntogil(a)libero.it Blocks: 1868278 (F34FTBFS) Target Milestone: --- Classification: Fedora geronimo-validation failed to build from source in Fedora rawhide/f34 https://koji.fedoraproject.org/koji/taskinfo?taskID=60908691 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Please fix geronimo-validation at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, geronimo-validation will be orphaned. Before branching of Fedora 35, geronimo-validation will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai... Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1868278 [Bug 1868278] (F34FTBFS) - Fedora 34 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
12
0 / 0

[Bug 1923380] New: geronimo-jcdi-1.1-api: FTBFS in Fedora rawhide/f34

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1923380 Bug ID: 1923380 Summary: geronimo-jcdi-1.1-api: FTBFS in Fedora rawhide/f34 Product: Fedora Version: rawhide Status: NEW Component: geronimo-jcdi-1.1-api Assignee: jjelen(a)redhat.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jjelen(a)redhat.com, puntogil(a)libero.it Blocks: 1868278 (F34FTBFS) Target Milestone: --- Classification: Fedora geronimo-jcdi-1.1-api failed to build from source in Fedora rawhide/f34 https://koji.fedoraproject.org/koji/taskinfo?taskID=60908690 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild Please fix geronimo-jcdi-1.1-api at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, geronimo-jcdi-1.1-api will be orphaned. Before branching of Fedora 35, geronimo-jcdi-1.1-api will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai... Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1868278 [Bug 1868278] (F34FTBFS) - Fedora 34 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
12
0 / 0

[Bug 1913727] New: ant contrib still depend of jakarta-commons-httpclient

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1913727 Bug ID: 1913727 Summary: ant contrib still depend of jakarta-commons-httpclient Product: Fedora Version: rawhide Hardware: All OS: Linux Status: NEW Component: ant-contrib Severity: urgent Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: mageia-java(a)nicolaslecureuil.fr QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, decathorpe(a)gmail.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Description of problem: According to https://fedoraproject.org/wiki/Changes/Deprecate_Apache_Jakarta_Commons_H... nothing should depend of jakarta-commons-httpclient anymore. There is on package left : ant-contrib https://src.fedoraproject.org/rpms/ant-contrib/blob/master/f/ant-contrib.... -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
6
0 / 0

[Bug 1824469] New: CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1824469 Bug ID: 1824469 Summary: CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: darunesh(a)redhat.com CC: dominik(a)greysector.net, i.gnatenko.brain(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, nickc(a)redhat.com, pbonzini(a)redhat.com Target Milestone: --- Classification: Other In Netwide Assembler (NASM) 2.14.02, stack consumption occurs in expr# functions in asm/eval.c. This potentially affects the relationships among expr0, expr1, expr2, expr3, expr4, expr5, and expr6 (and stdscan in asm/stdscan.c). This is similar to CVE-2019-6290 and CVE-2019-6291. https://bugzilla.nasm.us/show_bug.cgi?id=3392548#c4 https://bugzilla.nasm.us/show_bug.cgi?id=3392638 -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
6
0 / 0

[Bug 1824470] New: CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1824470 Bug ID: 1824470 Summary: CVE-2019-20334 nasm: stack consumption occurs in expr# functions in asm/eval.c [fedora-all] Product: Fedora Version: 31 Status: NEW Component: nasm Keywords: Security, SecurityTracking Severity: medium Priority: medium Assignee: i.gnatenko.brain(a)gmail.com Reporter: darunesh(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: dominik(a)greysector.net, i.gnatenko.brain(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, pbonzini(a)redhat.com Target Milestone: --- Classification: Fedora This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of fedora-all. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When submitting as an update, use the fedpkg template provided in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the fedpkg commit message. NOTE: this issue affects multiple supported versions of Fedora. While only one tracking bug has been filed, please correct all affected versions at the same time. If you need to fix the versions independent of each other, you may clone this bug as appropriate. -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
8
0 / 0

[Bug 1800412] New: spec-version-maven-plugin-2.1 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1800412 Bug ID: 1800412 Summary: spec-version-maven-plugin-2.1 is available Product: Fedora Version: rawhide Status: NEW Component: spec-version-maven-plugin Keywords: FutureFeature, Triaged Assignee: decathorpe(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: decathorpe(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, puntogil(a)libero.it, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 2.1 Current version/release in rawhide: 1.2-15.fc32 URL: http://glassfish.java.net/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/20405/ -- You are receiving this mail because: You are on the CC list for the bug.

1 year, 11 months

1
4
0 / 0

[Bug 1926777] New: mojo-parent-61 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1926777 Bug ID: 1926777 Summary: mojo-parent-61 is available Product: Fedora Version: rawhide Status: NEW Component: mojo-parent Keywords: FutureFeature, Triaged Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: decathorpe(a)gmail.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 61 Current version/release in rawhide: 60-1.fc34 URL: http://www.mojohaus.org/mojo-parent/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/2005/ -- You are receiving this mail because: You are on the CC list for the bug.

2 years

1
12
0 / 0

[Bug 1764658] New: CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1764658 Bug ID: 1764658 Summary: CVE-2019-12400 xml-security: Apache Santuario potentially loads XML parsing code from an untrusted source Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: psampaio(a)redhat.com CC: agrimm(a)gmail.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, asoldano(a)redhat.com, atangrin(a)redhat.com, avibelli(a)redhat.com, bbaranow(a)redhat.com, bgeorges(a)redhat.com, bmaxwell(a)redhat.com, brian.stansberry(a)redhat.com, caolanm(a)redhat.com, cdewolf(a)redhat.com, chazlett(a)redhat.com, darran.lofthouse(a)redhat.com, dosoudil(a)redhat.com, drieden(a)redhat.com, etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org, ggaughan(a)redhat.com, gvarsami(a)redhat.com, ibek(a)redhat.com, i.gnatenko.brain(a)gmail.com, iweiss(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jawilson(a)redhat.com, jbalunas(a)redhat.com, jcoleman(a)redhat.com, jhrozek(a)redhat.com, jochrist(a)redhat.com, jolee(a)redhat.com, jpallich(a)redhat.com, jperkins(a)redhat.com, jschatte(a)redhat.com, jstastny(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, kwills(a)redhat.com, ldimaggi(a)redhat.com, lef(a)fedoraproject.org, lgao(a)redhat.com, loleary(a)redhat.com, lthon(a)redhat.com, mnovotny(a)redhat.com, msochure(a)redhat.com, msvehla(a)redhat.com, mszynkie(a)redhat.com, nwallace(a)redhat.com, paradhya(a)redhat.com, pdrozd(a)redhat.com, pgallagh(a)redhat.com, pmackay(a)redhat.com, psotirop(a)redhat.com, puntogil(a)libero.it, rguimara(a)redhat.com, rrajasek(a)redhat.com, rruss(a)redhat.com, rsvoboda(a)redhat.com, rsynek(a)redhat.com, rwagner(a)redhat.com, sdaley(a)redhat.com, smaestri(a)redhat.com, spinder(a)redhat.com, ssorce(a)redhat.com, sthorger(a)redhat.com, tcunning(a)redhat.com, theute(a)redhat.com, tkirby(a)redhat.com, tom.jenkinson(a)redhat.com, trogers(a)redhat.com, twalsh(a)redhat.com, veillard(a)redhat.com, vhalbert(a)redhat.com Target Milestone: --- Classification: Other In version 2.0.3 Apache Santuario XML Security for Java, a caching mechanism was introduced to speed up creating new XML documents using a static pool of DocumentBuilders. However, if some untrusted code can register a malicious implementation with the thread context class loader first, then this implementation might be cached and re-used by Apache Santuario - XML Security for Java, leading to potential security flaws when validating signed documents, etc. The vulnerability affects Apache Santuario - XML Security for Java 2.0.x releases from 2.0.3 and all 2.1.x releases before 2.1.4. References: http://santuario.apache.org/secadv.data/CVE-2019-12400.asc?version=1&modi... https://lists.apache.org/thread.html/8e814b925bf580bc527d96ff51e72ffe5bde... https://lists.apache.org/thread.html/edaa7edb9c58e5f5bd0c950f2b6232b62b15... https://security.netapp.com/advisory/ntap-20190910-0003/ -- You are receiving this mail because: You are on the CC list for the bug.

2 years

1
25
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits February 2021