java-sig-commits April 2013

java-sig-commits@lists.fedoraproject.org

14 participants
447 discussions

[Bug 719628] New: Please build jtidy for EPEL 6
by Red Hat Bugzilla 14 Sep '17

14 Sep '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Please build jtidy for EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=719628 Summary: Please build jtidy for EPEL 6 Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: jtidy AssignedTo: SpikeFedora(a)gmail.com ReportedBy: redhat-bugzilla(a)linuxnetz.de QAContact: extras-qa(a)fedoraproject.org CC: dbhole(a)redhat.com, robert.scheck(a)etes.de, SpikeFedora(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org Classification: Fedora Story Points: --- Description of problem: Please build jtidy from Fedora 15 for EPEL 6, because it is required to build dom4j in EPEL 6. Version-Release number of selected component (if applicable): jtidy-1.0-0.10.20100930svn1125.fc15 Additional info: Please let me know, if you just don't want to be the maintainer for the jtidy EPEL 6 package... -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 2

[Bug 919544] New: maven-changes-plugin-2.9 is available
by Red Hat Bugzilla 27 Aug '16

27 Aug '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=919544 Bug ID: 919544 Summary: maven-changes-plugin-2.9 is available Product: Fedora Version: rawhide Component: maven-changes-plugin Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Reporter: upstream-release-monitoring(a)fedoraproject.org Latest upstream release: 2.9 Current version in Fedora Rawhide: 2.8 URL: http://repo2.maven.org/maven2/org/apache/maven/plugins/maven-changes-plugin/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sDYMSa0kpl&a=cc_unsubscribe

1 13

[Bug 958047] New: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported
by Red Hat Bugzilla 19 Jul '16

19 Jul '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958047 Bug ID: 958047 Summary: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported Product: Fedora Version: rawhide Component: woodstox-core Severity: unspecified Priority: unspecified Assignee: jcapik(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com Blocks: 958046 Category: --- This doesn't work: SAXParserFactory factory = new WstxSAXParserFactory(); factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); SAXParser parser = factory.newSAXParser(); InputSource is = new InputSource(new FileInputStream(args[0])); parser.parse(is, new DefaultHandler()); It results in: Exception in thread "main" org.xml.sax.SAXNotRecognizedException: Feature 'http://javax.xml.XMLConstants/feature/secure-processing' not recognized As a result, it appears impossible to defend against "billion laughs"-style denial of service attacks, along the lines of: https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s… https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s… -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bPCdHpPVN2&a=cc_unsubscribe

1 4

[Bug 958221] New: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand
by Red Hat Bugzilla 08 May '16

08 May '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958221 Bug ID: 958221 Summary: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand Product: Fedora Version: rawhide Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- org.codehaus.plexus.util.Expand does not guard against directory traversal, but such protection is generally expected from unarchiving tools. I think the class should just be deprecated and removed because there do not appear to be any users left (not even a test case). -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hp1lhU9LQd&a=cc_unsubscribe

1 5

[Bug 807598] New: aqute-bnd-1.50.0 is available
by Red Hat Bugzilla 16 Jul '15

16 Jul '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: aqute-bnd-1.50.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=807598 Summary: aqute-bnd-1.50.0 is available Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Unspecified Status: NEW Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Component: aqute-bnd AssignedTo: jcapik(a)redhat.com ReportedBy: upstream-release-monitoring(a)fedoraproject.org QAContact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Latest upstream release: 1.50.0 Current version in Fedora Rawhide: 0.0.363 URL: http://github.com/bndtools/bnd/blob/master/biz.aQute.bnd/bnd.bnd Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 28

[Bug 753201] New: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables
by Red Hat Bugzilla 09 Apr '15

09 Apr '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables https://bugzilla.redhat.com/show_bug.cgi?id=753201 Summary: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables Product: Fedora Version: 15 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: ant AssignedTo: pcheung(a)redhat.com ReportedBy: caolanm(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: pcheung(a)redhat.com, akurtako(a)redhat.com, mmatejov(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org Classification: Fedora Story Points: --- Type: --- Created attachment 533096 --> https://bugzilla.redhat.com/attachment.cgi?id=533096 sample build.xml Description of problem: ant doesn't seem to be able to resolve environment variables (or something clears the env) if the java in use is gcj rather than openjdk Version-Release number of selected component (if applicable): ant-1.8.2-3.fc15 How reproducible: 100% Steps to Reproduce: 1. alternatives --set javac /usr/lib/jvm/java-1.6.0-openjdk.x86_64/bin/javac 2. ant -f build.xml gives the contents of $USERNAME as expected 3. alternatives --set javac /usr/lib/jvm/java-1.5.0-gcj/bin/javac 4. ant -f build.xml gives "${env.USERNAME}" Actual results: username Expected results: ${env.USERNAME} string Additional info: -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 14

[Bug 861391] New: jgoodies-animation-1_4_2 is available
by Red Hat Bugzilla 16 Feb '15

16 Feb '15

https://bugzilla.redhat.com/show_bug.cgi?id=861391 Bug ID: 861391 Keywords: FutureFeature, Triaged QA Contact: extras-qa(a)fedoraproject.org Severity: unspecified Version: rawhide Priority: unspecified CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com Assignee: jcapik(a)redhat.com Summary: jgoodies-animation-1_4_2 is available Regression: --- Story Points: --- Classification: Fedora OS: Unspecified Reporter: upstream-release-monitoring(a)fedoraproject.org Type: --- Documentation: --- Hardware: Unspecified Mount Type: --- Status: NEW Component: jgoodies-animation Product: Fedora Latest upstream release: 1_4_2 Current version in Fedora Rawhide: 1.3.0 URL: http://www.jgoodies.com/downloads/libraries/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 796739] New: Missing service provider configuration files in the woodstox jar files
by Red Hat Bugzilla 19 Jan '15

19 Jan '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Missing service provider configuration files in the woodstox jar files https://bugzilla.redhat.com/show_bug.cgi?id=796739 Summary: Missing service provider configuration files in the woodstox jar files Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Linux Status: NEW Severity: medium Priority: unspecified Component: woodstox-core AssignedTo: jcapik(a)redhat.com ReportedBy: juan.hernandez(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Description of problem: The jar files provided in the woodstox-jar package don't contain the service provider configuration files needed to use the Version-Release number of selected component (if applicable): woodstox-core-4.1.2-2.fc17.x86_64 How reproducible: Always. Steps to Reproduce: 1. Write and compile the following java program: import javax.xml.stream.XMLInputFactory; public class Test { public static void main(String[] args) throws Exception { System.out.println(XMLInputFactory.newInstance()); } } 2. Run it with the version of the "woodstox-core-asj.jar" provided by the RPM: $ java -cp $(build-classpath woodstox-core stax2-api):. Test Actual results: com.sun.xml.internal.stream.XMLInputFactoryImpl@605df3c5 It is using the internal implementation provided by the JDK. Expected results: com.ctc.wstx.stax.WstxInputFactory@a5ae1e7 It should use the implementation provided by the woodstox-core package. Additional info: I believe that the problem is that the service provider configuration files that are available in the source of the package in the "src/resources" directory are not copied to the "META-INF/services" directory of the generated jar files. This can be fixed with the following patch for the spec: --- a/woodstox-core.spec +++ b/woodstox-core.spec @@ -64,7 +64,6 @@ sed -i "s/@REQ_STAX2_VERSION@/%{stax2_ver}/g" pom.xml pom-lgpl.xml # removing bundled stuff rm -rf lib rm -rf src/maven -rm -rf src/resources rm -rf src/samples rm -rf src/java/org rm -rf src/test/org @@ -76,6 +75,11 @@ mv -f src/java src/main/ mkdir src/test/java mv -f src/test/wstxtest src/test/java/ +# Make sure that the service provider configuration files end up +# in the META-INF/services directory of the resulting jar files: +mkdir -p src/main/resources/META-INF/services +cp src/resources/* src/main/resources/META-INF/services/. + %build # stax2 missing -> cannot compile tests -> tests skipped mvn-rpmbuild -Dmaven.test.skip=true \ -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 804968] New: Put /etc/ant.d on the LOCALCLASSPATH
by Red Hat Bugzilla 09 Jan '15

09 Jan '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Put /etc/ant.d on the LOCALCLASSPATH https://bugzilla.redhat.com/show_bug.cgi?id=804968 Summary: Put /etc/ant.d on the LOCALCLASSPATH Product: Fedora Version: 17 Platform: All OS/Version: All Status: NEW Severity: unspecified Priority: unspecified Component: ant AssignedTo: jcapik(a)redhat.com ReportedBy: cdewolf(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, mmatejov(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Description of problem: To allow usage of antlib.xml scripts installed by other rpms /etc/ant.d must be on the LOCALCLASSPATH for ant to find these scripts. Version-Release number of selected component (if applicable): ant-1.8.3-1.fc17.noarch -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 11

[Bug 922147] New: CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files) [fedora-all]
by Red Hat Bugzilla 05 Dec '14

05 Dec '14

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=922147 Bug ID: 922147 Summary: CVE-2013-0248 jakarta-commons-fileupload, apache-commons-fileupload: /tmp directory used by default for uploaded files (possibility to overwrite arbitrary files) [fedora-all] Product: Fedora Version: 18 Component: apache-commons-fileupload Keywords: Security, SecurityTracking Severity: low Priority: low Assignee: mizdebsk(a)redhat.com Reporter: jlieskov(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, mizdebsk(a)redhat.com, msrb(a)redhat.com, sochotni(a)redhat.com, SpikeFedora(a)gmail.com, tradej(a)redhat.com Blocks: 922146 (CVE-2013-0248) This is an automatically created tracking bug! It was created to ensure that one or more security vulnerabilities are fixed in affected versions of Fedora. For comments that are specific to the vulnerability please use bugs filed against the "Security Response" product referenced in the "Blocks" field. For more information see: http://fedoraproject.org/wiki/Security/TrackingBugs When creating a Bodhi update request, please use the bodhi submission link noted in the next comment(s). This will include the bug IDs of this tracking bug as well as the relevant top-level CVE bugs. Please also mention the CVE IDs being fixed in the RPM changelog and the Bodhi notes field when available. Please note: this issue affects multiple supported versions of Fedora. Only one tracking bug has been filed; please ensure that it is only closed when all affected versions are fixed. [bug automatically created by: add-tracking-bugs] -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=i2Ts9FpsI9&a=cc_unsubscribe

1 9

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits April 2013