[Bug 1133789] New: CVE-2013-7397 async-http-client: SSL/TLS certificate verification is disabled under certain conditions [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1133789
Bug ID: 1133789
Summary: CVE-2013-7397 async-http-client: SSL/TLS certificate
verification is disabled under certain conditions
[fedora-all]
Product: Fedora
Version: 20
Component: async-http-client
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mizdebsk(a)redhat.com
Reporter: djorm(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Blocks: 1133769 (CVE-2013-7397)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1133769
[Bug 1133769] CVE-2013-7397 async-http-client: SSL/TLS certificate
verification is disabled under certain conditions
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=corEJzycHn&a=cc_unsubscribe
9 years
[Bug 1076927] New: Solr - Hadoop missing support for ARM arch
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1076927
Bug ID: 1076927
Summary: Solr - Hadoop missing support for ARM arch
Product: Fedora
Version: rawhide
Component: solr
Assignee: puntogil(a)libero.it
Reporter: puntogil(a)libero.it
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
solr has broken dependencies in the rawhide tree:
On armhfp:
solr-4.7.0-1.fc21.noarch requires mvn(org.apache.hadoop:hadoop-hdfs)
solr-4.7.0-1.fc21.noarch requires mvn(org.apache.hadoop:hadoop-common)
solr-4.7.0-1.fc21.noarch requires mvn(org.apache.hadoop:hadoop-auth)
solr-4.7.0-1.fc21.noarch requires mvn(org.apache.hadoop:hadoop-annotations)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=snDZpFQcdi&a=cc_unsubscribe
9 years
[Bug 1119283] New: ant: Split libraries into subpackage
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1119283
Bug ID: 1119283
Summary: ant: Split libraries into subpackage
Product: Fedora
Version: 21
Component: ant
Assignee: jcapik(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com, jpazdziora(a)redhat.com,
krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com,
mmatejov(a)redhat.com, msrb(a)redhat.com
Description of problem:
Ant application requires JDK, but ant libraries can be (and often are) used
with just headless JRE.
Library part of ant should be split into subpackage to reduce unneeded
dependencies for applications that use ant as a library only.
Version-Release number of selected component (if applicable):
1.9.4-3
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=tWLW1SiWQu&a=cc_unsubscribe
9 years
[Bug 753201] New: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: when javac is java-1.5.0-gcj ant seems to not be able to access environmental variables
https://bugzilla.redhat.com/show_bug.cgi?id=753201
Summary: when javac is java-1.5.0-gcj ant seems to not be able
to access environmental variables
Product: Fedora
Version: 15
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: ant
AssignedTo: pcheung(a)redhat.com
ReportedBy: caolanm(a)redhat.com
QAContact: extras-qa(a)fedoraproject.org
CC: pcheung(a)redhat.com, akurtako(a)redhat.com,
mmatejov(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org
Classification: Fedora
Story Points: ---
Type: ---
Created attachment 533096
--> https://bugzilla.redhat.com/attachment.cgi?id=533096
sample build.xml
Description of problem:
ant doesn't seem to be able to resolve environment variables (or something
clears the env) if the java in use is gcj rather than openjdk
Version-Release number of selected component (if applicable):
ant-1.8.2-3.fc15
How reproducible:
100%
Steps to Reproduce:
1. alternatives --set javac /usr/lib/jvm/java-1.6.0-openjdk.x86_64/bin/javac
2. ant -f build.xml gives the contents of $USERNAME as expected
3. alternatives --set javac /usr/lib/jvm/java-1.5.0-gcj/bin/javac
4. ant -f build.xml gives "${env.USERNAME}"
Actual results:
username
Expected results:
${env.USERNAME} string
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
9 years
[Bug 1133787] New: CVE-2013-7398 async-http-client: missing hostname verification for SSL certificates [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1133787
Bug ID: 1133787
Summary: CVE-2013-7398 async-http-client: missing hostname
verification for SSL certificates [fedora-all]
Product: Fedora
Version: 20
Component: async-http-client
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mizdebsk(a)redhat.com
Reporter: djorm(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Blocks: 1133773 (CVE-2013-7398)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1133773
[Bug 1133773] CVE-2013-7398 async-http-client: missing hostname
verification for SSL certificates
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=nnjH3QlZyX&a=cc_unsubscribe
9 years, 1 month