[Bug 1273029] New: CVE-2015-3186 CVE-2015-3270 CVE-2015-5210 CVE-2015-1775 Apache Ambari: multiple flaws fixed in 2.1.2 [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1273029
Bug ID: 1273029
Summary: CVE-2015-3186 CVE-2015-3270 CVE-2015-5210
CVE-2015-1775 Apache Ambari: multiple flaws fixed in
2.1.2 [fedora-all]
Product: Fedora
Version: 22
Component: ambari
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: pmackinn(a)redhat.com
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
me(a)coolsvap.net, moceap(a)hotmail.com,
pmackinn(a)redhat.com
Blocks: 1273028
(CVE-2015-1775,CVE-2015-3186,CVE-2015-3270,CVE-2015-52
10)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1273028
[Bug 1273028] CVE-2015-5210 CVE-2015-3186 CVE-2015-3270 CVE-2015-1775
Apache Ambari: multiple flaws fixed in 2.1.2
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=29kDqzMhKn&a=cc_unsubscribe
7 years, 9 months
[Bug 988977] New: apache-rat tests fail to build
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=988977
Bug ID: 988977
Summary: apache-rat tests fail to build
Product: Fedora
Version: 19
Component: maven
Severity: medium
Assignee: sochotni(a)redhat.com
Reporter: orion(a)cora.nwra.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com,
sochotni(a)redhat.com, tradej(a)redhat.com
Description of problem:
This the previous issue with building tests seems to have been addressed, I
trying again but it is failing in a different way:
[INFO] RAT Maven Plugin .................................. FAILURE [10.011s]
[INFO] RAT Ant Tasks ..................................... SKIPPED
[INFO] RAT Application ................................... SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 19.363s
[INFO] Finished at: Fri Jul 26 14:02:13 MDT 2013
[INFO] Final Memory: 36M/201M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal
org.apache.maven.plugins:maven-surefire-plugin:2.15:test (default-test) on
project apache-rat-plugin: Execution default-test of goal
org.apache.maven.plugins:maven-surefire-plugin:2.15:test failed: There was an
error in the forked process
[ERROR] java.lang.NoClassDefFoundError:
org/sonatype/aether/RepositorySystemSession
[ERROR] at java.lang.Class.getDeclaredMethods0(Native Method)
[ERROR] at java.lang.Class.privateGetDeclaredMethods(Class.java:2521)
[ERROR] at java.lang.Class.getMethod0(Class.java:2764)
[ERROR] at java.lang.Class.getMethod(Class.java:1653)
[ERROR] at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.createInstanceFromSuiteMethod(JUnit3Reflector.java:152)
[ERROR] at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.constructTestObject(JUnit3Reflector.java:121)
[ERROR] at
org.apache.maven.surefire.junit.JUnitTestSet.execute(JUnitTestSet.java:70)
[ERROR] at
org.apache.maven.surefire.junit.JUnit3Provider.executeTestSet(JUnit3Provider.java:131)
[ERROR] at
org.apache.maven.surefire.junit.JUnit3Provider.invoke(JUnit3Provider.java:108)
[ERROR] at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:200)
[ERROR] at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:153)
[ERROR] at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:103)
[ERROR] Caused by: java.lang.ClassNotFoundException:
org.sonatype.aether.RepositorySystemSession
[ERROR] at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
[ERROR] at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
[ERROR] at java.security.AccessController.doPrivileged(Native Method)
[ERROR] at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
[ERROR] at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
[ERROR] at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
[ERROR] at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
[ERROR] ... 12 more
[ERROR] -> [Help 1]
org.apache.maven.lifecycle.LifecycleExecutionException: Failed to execute goal
org.apache.maven.plugins:maven-surefire-plugin:2.15:test (default-test) on
project apache-rat-plugin: Execution default-test of goal
org.apache.maven.plugins:maven-surefire-plugin:2.15:test failed: There was an
error in the forked process
java.lang.NoClassDefFoundError: org/sonatype/aether/RepositorySystemSession
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2521)
at java.lang.Class.getMethod0(Class.java:2764)
at java.lang.Class.getMethod(Class.java:1653)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.createInstanceFromSuiteMethod(JUnit3Reflector.java:152)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.constructTestObject(JUnit3Reflector.java:121)
at
org.apache.maven.surefire.junit.JUnitTestSet.execute(JUnitTestSet.java:70)
at
org.apache.maven.surefire.junit.JUnit3Provider.executeTestSet(JUnit3Provider.java:131)
at
org.apache.maven.surefire.junit.JUnit3Provider.invoke(JUnit3Provider.java:108)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:200)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:153)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:103)
Caused by: java.lang.ClassNotFoundException:
org.sonatype.aether.RepositorySystemSession
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 12 more
at
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:224)
at
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:153)
at
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:145)
at
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:84)
at
org.apache.maven.lifecycle.internal.LifecycleModuleBuilder.buildProject(LifecycleModuleBuilder.java:59)
at
org.apache.maven.lifecycle.internal.LifecycleStarter.singleThreadedBuild(LifecycleStarter.java:183)
at
org.apache.maven.lifecycle.internal.LifecycleStarter.execute(LifecycleStarter.java:161)
at org.apache.maven.DefaultMaven.doExecute(DefaultMaven.java:318)
at org.apache.maven.DefaultMaven.execute(DefaultMaven.java:153)
at org.apache.maven.cli.MavenCli.execute(MavenCli.java:555)
at org.apache.maven.cli.MavenCli.doMain(MavenCli.java:214)
at org.apache.maven.cli.MavenCli.main(MavenCli.java:158)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
org.codehaus.plexus.classworlds.launcher.Launcher.launchEnhanced(Launcher.java:290)
at
org.codehaus.plexus.classworlds.launcher.Launcher.launch(Launcher.java:230)
at
org.codehaus.plexus.classworlds.launcher.Launcher.mainWithExitCode(Launcher.java:414)
at
org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:357)
Caused by: org.apache.maven.plugin.PluginExecutionException: Execution
default-test of goal org.apache.maven.plugins:maven-surefire-plugin:2.15:test
failed: There was an error in the forked process
java.lang.NoClassDefFoundError:
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2521)
at java.lang.Class.getMethod0(Class.java:2764)
at java.lang.Class.getMethod(Class.java:1653)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.createInstanceFromSuiteMethod(JUnit3Reflector.java:152)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.constructTestObject(JUnit3Reflector.java:121)
at
org.apache.maven.surefire.junit.JUnitTestSet.execute(JUnitTestSet.java:70)
at
org.apache.maven.surefire.junit.JUnit3Provider.executeTestSet(JUnit3Provider.java:131)
at
org.apache.maven.surefire.junit.JUnit3Provider.invoke(JUnit3Provider.java:108)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:200)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:153)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:103)
Caused by: java.lang.ClassNotFoundException:
org.sonatype.aether.RepositorySystemSession
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 12 more
at
org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:115)
at
org.apache.maven.lifecycle.internal.MojoExecutor.execute(MojoExecutor.java:208)
... 19 more
Caused by: java.lang.RuntimeException: There was an error in the forked process
java.lang.NoClassDefFoundError: org/sonatype/aether/RepositorySystemSession
at java.lang.Class.getDeclaredMethods0(Native Method)
at java.lang.Class.privateGetDeclaredMethods(Class.java:2521)
at java.lang.Class.getMethod0(Class.java:2764)
at java.lang.Class.getMethod(Class.java:1653)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.createInstanceFromSuiteMethod(JUnit3Reflector.java:152)
at
org.apache.maven.surefire.common.junit3.JUnit3Reflector.constructTestObject(JUnit3Reflector.java:121)
at
org.apache.maven.surefire.junit.JUnitTestSet.execute(JUnitTestSet.java:70)
at
org.apache.maven.surefire.junit.JUnit3Provider.executeTestSet(JUnit3Provider.java:131)
at
org.apache.maven.surefire.junit.JUnit3Provider.invoke(JUnit3Provider.java:108)
at
org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:200)
at
org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:153)
at
org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:103)
Caused by: java.lang.ClassNotFoundException:
org.sonatype.aether.RepositorySystemSession
at java.net.URLClassLoader$1.run(URLClassLoader.java:366)
at java.net.URLClassLoader$1.run(URLClassLoader.java:355)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:354)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:308)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 12 more
at
org.apache.maven.plugin.surefire.booterclient.ForkStarter.fork(ForkStarter.java:479)
at
org.apache.maven.plugin.surefire.booterclient.ForkStarter.fork(ForkStarter.java:352)
at
org.apache.maven.plugin.surefire.booterclient.ForkStarter.run(ForkStarter.java:158)
at
org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeProvider(AbstractSurefireMojo.java:883)
at
org.apache.maven.plugin.surefire.AbstractSurefireMojo.executeAfterPreconditionsChecked(AbstractSurefireMojo.java:747)
at
org.apache.maven.plugin.surefire.AbstractSurefireMojo.execute(AbstractSurefireMojo.java:645)
at
org.apache.maven.plugin.DefaultBuildPluginManager.executeMojo(DefaultBuildPluginManager.java:106)
... 20 more
[ERROR]
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/PluginExecutionException
Version-Release number of selected component (if applicable):
maven-3.1.0-2.fc20.noarch
org/sonatype/aether/RepositorySystemSession seems to be in aether-api.jar which
is installed. Perhaps maven-surefire isn't expressing its dependencies
correctly?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=H63xmZZ3Nz&a=cc_unsubscribe
7 years, 9 months
[Bug 1237226] New: Caused by: java.lang.ClassNotFoundException: hudson.remoting.Callable
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1237226
Bug ID: 1237226
Summary: Caused by: java.lang.ClassNotFoundException:
hudson.remoting.Callable
Product: Fedora
Version: 22
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: jamespatterson(a)operamail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Description of problem:
jenkins seems broken out of the box with a missing class error.
$ cd /usr/share/jenkins/webroot/WEB-INF/lib
$ java -jar jenkins-core-1.609.jar
Exception in thread "main" java.lang.NoClassDefFoundError:
hudson/remoting/Callable
at hudson.Main.getHudsonHome(Main.java:77)
at hudson.Main.run(Main.java:63)
at hudson.Main.main(Main.java:55)
Caused by: java.lang.ClassNotFoundException: hudson.remoting.Callable
at java.net.URLClassLoader.findClass(URLClassLoader.java:381)
at java.lang.ClassLoader.loadClass(ClassLoader.java:424)
at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:331)
at java.lang.ClassLoader.loadClass(ClassLoader.java:357)
... 3 more
That missing class is provided by remoting.jar in the same directory.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Ta1rsIWBVT&a=cc_unsubscribe
7 years, 9 months
[Bug 1228918] New: selinux denies rsyslog logging to elasticsearch via rsyslog-elasticsearch
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1228918
Bug ID: 1228918
Summary: selinux denies rsyslog logging to elasticsearch via
rsyslog-elasticsearch
Product: Fedora
Version: 22
Component: elasticsearch
Assignee: jvanek(a)redhat.com
Reporter: david(a)algorithmicarmada.com
QA Contact: extras-qa(a)fedoraproject.org
CC: bkabrda(a)redhat.com, bobjensen(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, pbrobinson(a)gmail.com,
zbyszek(a)in.waw.pl
Created attachment 1035659
--> https://bugzilla.redhat.com/attachment.cgi?id=1035659&action=edit
/etc/rsyslog.d/elasticsearch.conf
Description of problem:
The package rsyslog-elasticsearch is broken out-of-the-box. rsyslog attempting
to log to elasticsearch results in the following AVC denials if NIS_ENABLED is
off:
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=734 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=734 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=731 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
Installation of the package rsyslog-elasticsearch should allow rsyslog to
connect to elasticsearch's particular port, without opening rsyslog to all
ports, and also without impacting other installed programs.
Version-Release number of selected component (if applicable):
Fedora 22 Server
$ dnf list elasticsearch rsyslog-elasticsearch rsyslog
Last metadata expiration check performed 0:06:09 ago on Sat Jun 6 12:05:59
2015.
Installed Packages
elasticsearch.noarch 1.5.2-0.fc22
@System
rsyslog.x86_64 8.8.0-2.fc22
@System
rsyslog-elasticsearch.x86_64 8.8.0-2.fc22
@System
How reproducible:
Very.
Steps to Reproduce:
1. Install elasticsearch and rsyslog-elasticsearch. I'm using a cluster of 2
machines, but that shouldn't matter.
2. Ensure the SELinux bool nis_enabled is off. This was the case without my
intervention.
3. Configure rsylog as per the attached configuration (separate file in
/etc/rsyslog.d/)
Actual results:
AVC denials in /var/log/messages, no index created in elasticsearch.
Expected results:
Indices should be created in elasticsearch while messages are logged, AVC
should not deny rsyslog's connections, nothing noteworthy should be logged in
/var/log/messages.
Note that if rsyslog-elasticsearch is not installed, rsyslog should not be
allowed to connect to port 9200 (without nis_enabled being set), regardless of
whether elasticsearch is installed.
Additional info:
- I'm using a bare-metal cluster of 2 computers for elasticsearch, both of
which should be configured identically, courtesy of ansible.
- Elasticsearch configuration specified the network name as the host name.
- Elasticsearch configuration specifies a non-default cluster name.
- Elasticsearch uses a few ports other than 9200. I know of 9300, can't find a
documented list at the moment.
- I do have the logstash repository from www.elastic.co setup, but should not
be using packages from it.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=C512Oqx7ra&a=cc_unsubscribe
7 years, 9 months
[Bug 1222304] New: build_hash not substituted
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1222304
Bug ID: 1222304
Summary: build_hash not substituted
Product: Fedora
Version: 22
Component: elasticsearch
Assignee: jvanek(a)redhat.com
Reporter: jimmyjones2(a)gmx.co.uk
QA Contact: extras-qa(a)fedoraproject.org
CC: bkabrda(a)redhat.com, bobjensen(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, pbrobinson(a)gmail.com,
zbyszek(a)in.waw.pl
curl localhost:9200
{
"status" : 200,
"name" : "Tyrannus",
"cluster_name" : "elasticsearch",
"version" : {
"number" : "1.5.2",
"build_hash" : "${buildNumber}",
"build_timestamp" : "NA",
"build_snapshot" : false,
"lucene_version" : "4.10.3"
},
"tagline" : "You Know, for Search"
}
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=aXnejE1k0E&a=cc_unsubscribe
7 years, 9 months