[Bug 1076949] New: tomcat: don't provide javax.jsp-api and javax.servlet.jsp-api
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1076949
Bug ID: 1076949
Summary: tomcat: don't provide javax.jsp-api and
javax.servlet.jsp-api
Product: Fedora
Version: rawhide
Component: tomcat
Assignee: ivan.afonichev(a)gmail.com
Reporter: msimacek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Description of problem:
javax.jsp:jsp-api and javax.servlet.jsp:javax.servlet.jsp-api artifacts are
provided by both tomcat-jsp-2.2-api and glassfish-jsp[-api]. Because requires
generator doesn't specify versions, there should be only one provide of given
artifact. If the artifact is provided by multiple packages, it can lead to
breakage of packages that depend on different version of the artifact than the
version pulled in by yum (which is not predictable). Glassfish is the preferred
implementation according to Java Packaging Guidelines [1].Please drop the
aliases.
[1] http://fedoraproject.org/wiki/Packaging:Java#EE_API_List
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=xRWmTHaZWE&a=cc_unsubscribe
9 years, 1 month
[Bug 1027716] New: Problem with log4j link creation on /usr/share/java/log4j
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1027716
Bug ID: 1027716
Summary: Problem with log4j link creation on
/usr/share/java/log4j
Product: Fedora
Version: 19
Component: tomcat
Severity: high
Assignee: ivan.afonichev(a)gmail.com
Reporter: braoru(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
kdaniel(a)redhat.com
Description of problem:
Tomcat7 seem to not properly install log4j link in /usr/share/java/log4j
[root@mgbsiti01 lib]# file /usr/share/tomcat/lib/log4j.jar
/usr/share/tomcat/lib/log4j.jar: broken symbolic link to
`/usr/share/java/log4j.jar'
I tried to spot the problem in the spec file of the package but I still
unsuccessful and keep trying :-(.
Version-Release number of selected component (if applicable):
[root@mgbsiti01 lib]# rpm -qa | grep tomcat
tomcat-lib-7.0.42-1.fc19.noarch
tomcat-7.0.42-1.fc19.noarch
tomcat-jsp-2.2-api-7.0.42-1.fc19.noarch
tomcat-el-2.2-api-7.0.42-1.fc19.noarch
tomcat-servlet-3.0-api-7.0.42-1.fc19.noarch
[root@mgbsiti01 lib]# rpm -qf /usr/share/tomcat/lib/log4j.jar
tomcat-lib-7.0.42-1.fc19.noarch
How reproducible:
yum install tomcat
Steps to Reproduce:
1.yum install tomcat
2.
3.
Actual results:
log4j link is broken :-(
Expected results:
log4j link not broken :-)
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=D0CcAy9GW1&a=cc_unsubscribe
9 years, 1 month
[Bug 1102678] New: CVE-2014-0075 tomcat: Limited DoS in chunked transfer encoding input filter [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1102678
Bug ID: 1102678
Summary: CVE-2014-0075 tomcat: Limited DoS in chunked transfer
encoding input filter [fedora-all]
Product: Fedora
Version: 20
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: djorm(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Blocks: 1072776 (CVE-2014-0075)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1072776
[Bug 1072776] CVE-2014-0075 tomcat: Limited DoS in chunked transfer
encoding input filter
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=FxNPBuSSS1&a=cc_unsubscribe
9 years, 1 month
[Bug 1102210] New: CVE-2014-0099 Apache Tomcat: Request smuggling via malicious content length header [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1102210
Bug ID: 1102210
Summary: CVE-2014-0099 Apache Tomcat: Request smuggling via
malicious content length header [fedora-all]
Product: Fedora
Version: 20
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: aneelica(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Blocks: 1102030 (CVE-2014-0099)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, use the bodhi submission link noted
in the next comment(s). This will include the bug IDs of this tracking
bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1102030
[Bug 1102030] CVE-2014-0099 Apache Tomcat: Request smuggling via malicious
content length header
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=U6i2Sggdjh&a=cc_unsubscribe
9 years, 1 month