java-sig-commits June 2013

java-sig-commits@lists.fedoraproject.org

13 participants
390 discussions

[Bug 977249] New: htmlcleaner-2.5 is available
by Red Hat Bugzilla 24 Apr '18

24 Apr '18

https://bugzilla.redhat.com/show_bug.cgi?id=977249 Bug ID: 977249 Summary: htmlcleaner-2.5 is available Product: Fedora Version: rawhide Component: htmlcleaner Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Assignee: Marcin.Dulak(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: bjoern.esser(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, Marcin.Dulak(a)gmail.com Latest upstream release: 2.5 Current version/release in Fedora Rawhide: 2.2.1-2.fc20 URL: http://sourceforge.net/api/file/index/project-name/htmlcleaner/mtime/desc/l… Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=B0wPSZFa2g&a=cc_unsubscribe

2 46

[Bug 958733] New: plexus-utils: suspicious shell quoting in org.codehaus.plexus.util.cli
by Red Hat Bugzilla 09 Jan '18

09 Jan '18

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958733 Bug ID: 958733 Summary: plexus-utils: suspicious shell quoting in org.codehaus.plexus.util.cli Product: Fedora Version: 18 Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- The shell quoting logic in this package (and the org.codehaus.plexus.util.cli.shell) package looks fairly dangerous. It appears to be mostly dead code. Client code should be migrated to java.lang.ProcessBuilder. The different quoting options (single quotes, double quotes) are difficult to get right, and the reference to StringUtils is not particularly helpful because the caller has to provide the correct set of characters to be escaped, which is platform-dependent. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JhGrfK5sg6&a=cc_unsubscribe

2 10

[Bug 719628] New: Please build jtidy for EPEL 6
by Red Hat Bugzilla 14 Sep '17

14 Sep '17

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: Please build jtidy for EPEL 6 https://bugzilla.redhat.com/show_bug.cgi?id=719628 Summary: Please build jtidy for EPEL 6 Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: jtidy AssignedTo: SpikeFedora(a)gmail.com ReportedBy: redhat-bugzilla(a)linuxnetz.de QAContact: extras-qa(a)fedoraproject.org CC: dbhole(a)redhat.com, robert.scheck(a)etes.de, SpikeFedora(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org Classification: Fedora Story Points: --- Description of problem: Please build jtidy from Fedora 15 for EPEL 6, because it is required to build dom4j in EPEL 6. Version-Release number of selected component (if applicable): jtidy-1.0-0.10.20100930svn1125.fc15 Additional info: Please let me know, if you just don't want to be the maintainer for the jtidy EPEL 6 package... -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

2 2

[Bug 919544] New: maven-changes-plugin-2.9 is available
by Red Hat Bugzilla 27 Aug '16

27 Aug '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=919544 Bug ID: 919544 Summary: maven-changes-plugin-2.9 is available Product: Fedora Version: rawhide Component: maven-changes-plugin Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Reporter: upstream-release-monitoring(a)fedoraproject.org Latest upstream release: 2.9 Current version in Fedora Rawhide: 2.8 URL: http://repo2.maven.org/maven2/org/apache/maven/plugins/maven-changes-plugin/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=sDYMSa0kpl&a=cc_unsubscribe

1 13

[Bug 958047] New: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported
by Red Hat Bugzilla 19 Jul '16

19 Jul '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958047 Bug ID: 958047 Summary: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported Product: Fedora Version: rawhide Component: woodstox-core Severity: unspecified Priority: unspecified Assignee: jcapik(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com Blocks: 958046 Category: --- This doesn't work: SAXParserFactory factory = new WstxSAXParserFactory(); factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); SAXParser parser = factory.newSAXParser(); InputSource is = new InputSource(new FileInputStream(args[0])); parser.parse(is, new DefaultHandler()); It results in: Exception in thread "main" org.xml.sax.SAXNotRecognizedException: Feature 'http://javax.xml.XMLConstants/feature/secure-processing' not recognized As a result, it appears impossible to defend against "billion laughs"-style denial of service attacks, along the lines of: https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s… https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s… -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bPCdHpPVN2&a=cc_unsubscribe

1 4

[Bug 958727] New: plexus-utils: XMLWriterUtil should guard against problematic comments
by Red Hat Bugzilla 08 May '16

08 May '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958727 Bug ID: 958727 Summary: plexus-utils: XMLWriterUtil should guard against problematic comments Product: Fedora Version: rawhide Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- org.codehaus.plexus.util.xml#writeComment(XMLWriter, String, int, int, int) does not check if the comment includes a "-->" sequence. This means that text contained in the command string could be interpreted as XML, possibly leading to XML injection issues, depending on how this method is being called. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=N5myzkUcYQ&a=cc_unsubscribe

1 6

[Bug 958221] New: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand
by Red Hat Bugzilla 08 May '16

08 May '16

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958221 Bug ID: 958221 Summary: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand Product: Fedora Version: rawhide Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- org.codehaus.plexus.util.Expand does not guard against directory traversal, but such protection is generally expected from unarchiving tools. I think the class should just be deprecated and removed because there do not appear to be any users left (not even a test case). -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hp1lhU9LQd&a=cc_unsubscribe

1 5

[Bug 807598] New: aqute-bnd-1.50.0 is available
by Red Hat Bugzilla 16 Jul '15

16 Jul '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: aqute-bnd-1.50.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=807598 Summary: aqute-bnd-1.50.0 is available Product: Fedora Version: rawhide Platform: Unspecified OS/Version: Unspecified Status: NEW Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Component: aqute-bnd AssignedTo: jcapik(a)redhat.com ReportedBy: upstream-release-monitoring(a)fedoraproject.org QAContact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com Classification: Fedora Story Points: --- Type: --- Regression: --- Mount Type: --- Documentation: --- Latest upstream release: 1.50.0 Current version in Fedora Rawhide: 0.0.363 URL: http://github.com/bndtools/bnd/blob/master/biz.aQute.bnd/bnd.bnd Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 28

[Bug 973963] New: maven-plugin-bundle-2.4.0 is available
by Red Hat Bugzilla 30 Apr '15

30 Apr '15

https://bugzilla.redhat.com/show_bug.cgi?id=973963 Bug ID: 973963 Summary: maven-plugin-bundle-2.4.0 is available Product: Fedora Version: rawhide Component: maven-plugin-bundle Keywords: FutureFeature, Triaged Severity: unspecified Priority: unspecified Assignee: jcapik(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com, tradej(a)redhat.com Latest upstream release: 2.4.0 Current version/release in Fedora Rawhide: 2.3.7-8.fc20 URL: http://repo2.maven.org/maven2/org/apache/felix/maven-bundle-plugin/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hSLxa6Nlv7&a=cc_unsubscribe

1 8

[Bug 753201] New: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables
by Red Hat Bugzilla 09 Apr '15

09 Apr '15

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. Summary: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables https://bugzilla.redhat.com/show_bug.cgi?id=753201 Summary: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables Product: Fedora Version: 15 Platform: Unspecified OS/Version: Unspecified Status: NEW Severity: unspecified Priority: unspecified Component: ant AssignedTo: pcheung(a)redhat.com ReportedBy: caolanm(a)redhat.com QAContact: extras-qa(a)fedoraproject.org CC: pcheung(a)redhat.com, akurtako(a)redhat.com, mmatejov(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org Classification: Fedora Story Points: --- Type: --- Created attachment 533096 --> https://bugzilla.redhat.com/attachment.cgi?id=533096 sample build.xml Description of problem: ant doesn't seem to be able to resolve environment variables (or something clears the env) if the java in use is gcj rather than openjdk Version-Release number of selected component (if applicable): ant-1.8.2-3.fc15 How reproducible: 100% Steps to Reproduce: 1. alternatives --set javac /usr/lib/jvm/java-1.6.0-openjdk.x86_64/bin/javac 2. ant -f build.xml gives the contents of $USERNAME as expected 3. alternatives --set javac /usr/lib/jvm/java-1.5.0-gcj/bin/javac 4. ant -f build.xml gives "${env.USERNAME}" Actual results: username Expected results: ${env.USERNAME} string Additional info: -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 14

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits June 2013