[Bug 1133789] New: CVE-2013-7397 async-http-client: SSL/TLS certificate verification is disabled under certain conditions [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1133789
Bug ID: 1133789
Summary: CVE-2013-7397 async-http-client: SSL/TLS certificate
verification is disabled under certain conditions
[fedora-all]
Product: Fedora
Version: 20
Component: async-http-client
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: mizdebsk(a)redhat.com
Reporter: djorm(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Blocks: 1133769 (CVE-2013-7397)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1133769
[Bug 1133769] CVE-2013-7397 async-http-client: SSL/TLS certificate
verification is disabled under certain conditions
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=corEJzycHn&a=cc_unsubscribe
8 years, 11 months
[Bug 1213200] New: please update to 4.10.4
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1213200
Bug ID: 1213200
Summary: please update to 4.10.4
Product: Fedora
Version: 22
Component: lucene
Assignee: akurtako(a)redhat.com
Reporter: zbyszek(a)in.waw.pl
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
eclipse-sig(a)lists.fedoraproject.org,
hicham.haouari(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
msimacek(a)redhat.com, puntogil(a)libero.it,
rgrunber(a)redhat.com
Description of problem:
elasticsearch 1.5.1 uses lucene 4.10.4. This seems to a bugfix release (there's
just one deprecation listed in api changes).
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=uD4gqtmqVS&a=cc_unsubscribe
8 years, 11 months
[Bug 1211777] Reboot get's stuck
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1211777
Thomas Meyer <thomas.mey(a)web.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |CLOSED
Resolution|--- |NOTABUG
Flags|needinfo?(thomas.mey(a)web.de |
|) |
Last Closed| |2015-05-07 17:03:12
--- Comment #3 from Thomas Meyer <thomas.mey(a)web.de> ---
Hi Marian, Mat,
I actually did copy the packaged systemd.unit file from Fedora. I just checked
again and I did kill the After= line in my custom unit file.
I think the missing After= is the explanation for the wrong ordering dependency
in the shutdown.
I added the line again.
Sorry for the noise and thank for your help.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YCQafWsaVN&a=cc_unsubscribe
8 years, 11 months
[Bug 1211777] Reboot get's stuck
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1211777
Mat Booth <mat.booth(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |mat.booth(a)redhat.com,
| |thomas.mey(a)web.de
Flags| |needinfo?(thomas.mey(a)web.de
| |)
--- Comment #2 from Mat Booth <mat.booth(a)redhat.com> ---
(In reply to Marian Csontos from comment #1)
> Whatever jetty is, stop it earlier during shutdown. You can not turn swap
> off while there are processes using more memory than is available on the
> host.
>
> Assigning to jetty which should modify it's systemd unit to stop before
> turning off the swap. Consult systemd documentation/experts how to achieve
> that.
I don't think the jetty maintainers can do much to fix the user's "self made
unit file" ;-)
Thomas, does changing your unit file to shut down jetty earlier, following
Marian's advice, fix the problem for you?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=BIFixTI4XV&a=cc_unsubscribe
8 years, 11 months