https://bugzilla.redhat.com/show_bug.cgi?id=1164159
Bug ID: 1164159
Summary: plexus-archiver-2.8.4 is available
Product: Fedora
Version: rawhide
Component: plexus-archiver
Keywords: FutureFeature, Triaged
Assignee: jcapik(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com, mizdebsk(a)redhat.com
Latest upstream release: 2.8.4
Current version/release in Fedora Rawhide: 2.8.2-1.fc22
URL: https://github.com/sonatype/plexus-archiver/tags
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring Soon this service
will be implemented by a new system: https://release-monitoring.org/
It will require to manage monitored projects via a new web interface. Please
make yourself familiar with the new system to ease the transition.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=po9DpNpPlt&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1157630
Bug ID: 1157630
Summary: qdox: Update to upstream version 2.0
Product: Fedora
Version: rawhide
Component: qdox
Keywords: FutureFeature
Assignee: akurtako(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Blocks: 1157505
Description of problem:
Please update qdox to upstream version 2.x. Plexus container requires qdox
version 2.0-M2.
Version-Release number of selected component (if applicable):
1.12.1-10
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1157505
[Bug 1157505] plexus-containers-1.6 is available
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=oWxssqacAJ&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1158060
Bug ID: 1158060
Summary: maven-javadoc-plugin: Port to QDox 2.0
Product: Fedora
Version: rawhide
Component: maven-javadoc-plugin
Priority: high
Assignee: mizdebsk(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)redhat.com, mizdebsk(a)redhat.com
Blocks: 1157630
Description of problem:
QDox is being updated to new major version (2.0) and maven-javadoc-plugin needs
to be ported to work with this version.
Version-Release number of selected component (if applicable):
2.10.1-2
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1157630
[Bug 1157630] qdox: Update to upstream version 2.0
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=fBkNwIO8E7&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1098509
Bug ID: 1098509
Summary: all jpackage following lunchers are using by defalt
JDK instead of JRE
Product: Red Hat Enterprise Linux 7
Version: 7.1
Component: jpackage-utils
Severity: high
Assignee: java-maint(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: qe-baseos-apps(a)redhat.com
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, sochotni(a)redhat.com
Depends On: 1098508
+++ This bug was initially created as a clone of Bug #1098508 +++
Description of problem:
When alternatives are used to change jre (alternatives --config java) the all
jpackage compatible java apps, are still using the java specified by JDK
(alternatives --config javac)
This is wrong. Especially for case when I have one JDK and one JRE. Then I can
use alternatives as , and still only JDK will
be selected.
Version-Release number of selected component (if applicable):
All fedoras and rhels till now
How reproducible:
Steps to Reproduce on f20:
1. $ install java-1.7.0-openjdk-devel, and java-1.8.0-oepnjdk
2. $ alternatives --configure java
3. select java 8
4. # run some packed java app
Expected results:
java8 will be used
Actual results:
java 7 is still used
To use java 8 you ust install java-1.8.0-openjdk-devel
and select java 8 via $alternatives --config javac
Additional info:
Currently jpackage-utils are using JDK by default. Any app which wonts to use
only JRE must specifi _prefer_jre=true to luncher.
Well this is wrong in design. All apps should use JRE by default, and only few
(10?) apps using whole JDK should specifi _prefer_jre=false.
Another workarouds ae set JAVA_HOME or edit /etc/java/java.conf But htose are
far away from compfortable alternatives solution.
As reason not to do the change was introduced ant - that it needs whole JDK to
run. IMHO it is one of the few apps which should specifu _prefer_jre=false...
Fix is quite simple
Change /usr/share/java-utils/java-functions to use /usr/lib/jvm/jre instead of
/usr/lib/java
However, the consequences may be really huge.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1098508
[Bug 1098508] all jpackage following lunchers are using by defalt JDK
instead of JRE
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=2mmm5RWXNA&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1098508
Bug ID: 1098508
Summary: all jpackage following lunchers are using by defalt
JDK instead of JRE
Product: Fedora
Version: rawhide
Component: jpackage-utils
Severity: high
Assignee: mizdebsk(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, mizdebsk(a)redhat.com,
msrb(a)redhat.com, sochotni(a)redhat.com
Description of problem:
When alternatives are used to change jre (alternatives --config java) the all
jpackage compatible java apps, are still using the java specified by JDK
(alternatives --config javac)
This is wrong. Especially for case when I have one JDK and one JRE. Then I can
use alternatives as , and still only JDK will
be selected.
Version-Release number of selected component (if applicable):
All fedoras and rhels till now
How reproducible:
Steps to Reproduce on f20:
1. $ install java-1.7.0-openjdk-devel, and java-1.8.0-oepnjdk
2. $ alternatives --configure java
3. select java 8
4. # run some packed java app
Expected results:
java8 will be used
Actual results:
java 7 is still used
To use java 8 you ust install java-1.8.0-openjdk-devel
and select java 8 via $alternatives --config javac
Additional info:
Currently jpackage-utils are using JDK by default. Any app which wonts to use
only JRE must specifi _prefer_jre=true to luncher.
Well this is wrong in design. All apps should use JRE by default, and only few
(10?) apps using whole JDK should specifi _prefer_jre=false.
Another workarouds ae set JAVA_HOME or edit /etc/java/java.conf But htose are
far away from compfortable alternatives solution.
As reason not to do the change was introduced ant - that it needs whole JDK to
run. IMHO it is one of the few apps which should specifu _prefer_jre=false...
Fix is quite simple
Change /usr/share/java-utils/java-functions to use /usr/lib/jvm/jre instead of
/usr/lib/java
However, the consequences may be really huge.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=g42lptd4V6&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1196254
Bug ID: 1196254
Summary: CVE-2015-2080 jetty: remote unauthenticated credential
exposure
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: atangrin(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, cperry(a)redhat.com,
dmcphers(a)redhat.com,
eclipse-sig(a)lists.fedoraproject.org,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, jokerman(a)redhat.com,
krzysztof.daniel(a)gmail.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mizdebsk(a)redhat.com,
mkollar(a)redhat.com, mmccomas(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com,
overholt(a)gmail.com, pmackinn(a)redhat.com,
taw(a)redhat.com, tjay(a)redhat.com
CVE-2015-2080 has been assigned to this issue in which Jetty sends an
HTTP response to one client containing HTTP request data from a
different client:
External References:
http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00074.htmlhttps://github.com/eclipse/jetty.project/blob/master/advisories/2015-02-24-…http://blog.gdssecurity.com/labs/2015/2/25/jetleak-vulnerability-remote-lea…
Statement:
This issue did not affect the versions of jetty as shipped with Red Hat
Enterprise Linux 7, versions of openshift-origin-cartridge-fuse as shipped with
Red Hat OpenShift Enterprise 2.1, and versions of nutch as shipped with Red Hat
Satellite 5.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wHn58JK7TV&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1196207
Bug ID: 1196207
Summary: sisu: Update to 0.3.0 final
Product: Fedora
Version: 22
Component: sisu
Keywords: FutureFeature
Assignee: mizdebsk(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: eclipse-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Description of problem:
Currently Fedora 22 has pre-release of Sisu (0.3.0.M1).
Sisu should be updated to 0.3.0 final release.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=JQawDff2ep&a=cc_unsubscribe