[Bug 709531] CVE-2011-1498 httpcomponents-client: sends Proxy-Authorization header to host when tunneling requests through authenticated proxy server
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=709531
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|public=20110320,reported=20 |public=20110320,reported=20
|110407,source=oss-sec,impac |110407,source=oss-security,
|t=moderate,cvss2=5.8/AV:N/A |impact=moderate,cvss2=5.8/A
|C:M/Au:N/C:P/I:P/A:N,fedora |V:N/AC:M/Au:N/C:P/I:P/A:N,f
|-15/httpcomponents-client=a |edora-15/httpcomponents-cli
|ffected |ent=affected
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=2gu1JX76km&a=cc_unsubscribe
8 years, 9 months
[Bug 1069919] CVE-2014-0033 tomcat: session fixation still possible with disableURLRewriting enabled
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1069919
Fedora Java SIG <java-sig-commits(a)lists.fedoraproject.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC|java-sig-commits(a)lists.fedo |
|raproject.org |
Ján Rusnačko <jrusnack(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2014 |impact=moderate,public=2014
|0225,reported=20140225,sour |0225,reported=20140225,sour
|ce=internet,cvss2=4.3/AV:N/ |ce=internet,cvss2=4.3/AV:N/
|AC:M/Au:N/C:P/I:N/A:N,bpms- |AC:M/Au:N/C:P/I:N/A:N,bpms-
|6/jbossweb=notaffected,brms |6/jbossweb=notaffected,brms
|-6/jbossweb=notaffected,dts |-6/jbossweb=notaffected,dts
|-2.0/devtoolset-2-tomcat=no |-2.0/devtoolset-2-tomcat=no
|taffected,eap-6/jbossweb=no |taffected,eap-6/jbossweb=no
|taffected,fedora-all/tomcat |taffected,fedora-all/tomcat
|=notaffected,fsw-6/jbossweb |=notaffected,fsw-6/jbossweb
|=notaffected,jbews-1/tomcat |=notaffected,jbews-1/tomcat
|5=notaffected,jbews-1/tomca |5=notaffected,jbews-1/tomca
|t6=notaffected,jbews-2/tomc |t6=notaffected,jbews-2/tomc
|at6=affected,jbews-2/tomcat |at6=affected,jbews-2/tomcat
|7=notaffected,jboss/jbosswe |7=notaffected,jboss/jbosswe
|b7=notaffected,jdg-6/jbossw |b7=notaffected,jdg-6/jbossw
|eb=notaffected,jdv-6/jbossw |eb=notaffected,jdv-6/jbossw
|eb=notaffected,jon-3/jbossw |eb=notaffected,jon-3/jbossw
|eb=notaffected,jpp-6/jbossw |eb=notaffected,jpp-6/jbossw
|eb=notaffected,openshift-1/ |eb=notaffected,openshift-1/
|tomcat7=notaffected,rhel-5/ |tomcat7=notaffected,rhel-5/
|tomcat5=notaffected,rhel-6. |tomcat5=notaffected,rhel-6.
|5.z/tomcat6=notaffected,rhe |5.z/tomcat6=notaffected,rhe
|l-6/tomcat6=notaffected,rhe |l-6/tomcat6=notaffected,rhe
|l-7/tomcat=notaffected,rhel |l-7/tomcat=notaffected,rhel
|-6.5.z/tomcat6=notaffected, |-6.6/tomcat6=notaffected,ea
|rhel-6.6/tomcat6=notaffecte |p-5/jbossweb=wontfix,jboss/
|d,eap-5/jbossweb=wontfix,jb |jbossweb2=wontfix,cwe=CWE-3
|oss/jbossweb2=wontfix,cwe=C |84
|WE-384 |
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=1OL71R6SDO&a=cc_unsubscribe
8 years, 9 months
[javapackages] Upload docs to correct location
by Mikolaj Izdebski
commit 779b24e989b9fba9f14b0fe58e2aa8ac043b0dd4
Author: Mikolaj Izdebski <mizdebsk(a)redhat.com>
Date: Tue Jul 28 07:33:18 2015 +0200
Upload docs to correct location
doc/Makefile | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
---
diff --git a/doc/Makefile b/doc/Makefile
index a207000..6a0615a 100644
--- a/doc/Makefile
+++ b/doc/Makefile
@@ -11,13 +11,13 @@ upload-all:
mkdir doc
cp *.html doc
cp -r images/ doc/
- scp -r doc fedorahosted.org:javapackages
+ scp -r doc fedorahosted.org:/srv/web/releases/j/a/javapackages/
upload-fast:
rm -rf doc
mkdir doc
cp *.html doc
- scp -r doc fedorahosted.org:javapackages
+ scp -r doc fedorahosted.org:/srv/web/releases/j/a/javapackages/
clean:
rm -Rf *.html images/*.svg doc/
8 years, 9 months
[javapackages] [doc] Add initial documentation for packaging Gradle projects
by Mikolaj Izdebski
commit fbdc50f63c89bd5cd2cfe98f33fdaaadb6be6019
Author: Mikolaj Izdebski <mizdebsk(a)redhat.com>
Date: Tue Jul 28 07:20:28 2015 +0200
[doc] Add initial documentation for packaging Gradle projects
doc/gradle.txt | 81 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++
doc/index.txt | 4 +++
2 files changed, 85 insertions(+), 0 deletions(-)
---
diff --git a/doc/gradle.txt b/doc/gradle.txt
new file mode 100644
index 0000000..372ef02
--- /dev/null
+++ b/doc/gradle.txt
@@ -0,0 +1,81 @@
+[quote,,from Gradle package description]
+______
+Gradle combines the power and flexibility of Ant with the dependency
+management and conventions of Maven into a more effective way to
+build. Powered by a Groovy DSL and packed with innovation, Gradle
+provides a declarative way to describe all kinds of builds through
+sensible defaults. Gradle is quickly becoming the build system of
+choice for many open source projects, leading edge enterprises and
+legacy automation challenges.
+______
+
+Gradle is quickly gaining popularity as flexible Java build system,
+which can be used in situations requiring writing custom build logic.
+Flexibility means that Gradle build scripts can differ significantly
+across different projects and there is no universal way of packaging
+Gradle projects. However, in most common situations the following
+steps can are necessary:
+
+1. Add build-dependency on `gradle-local`
+2. In `%build` section of the spec file call `gradle-local` script
+ with `--offline` switch and appropriate build targets as arguments
+3. Mark generated artifacts using `%mvn_artifact` macro
+4. In `%install` section, use `%mvn_install` macro with `-J` argument
+ pointing to directory containing generated Javadoc documentation
+5. Use generated file `.mfiles` lists to populate `%files` section
+ with `-f` switch
+
+.Common spec file sections
+[source,spec]
+--------
+BuildRequires: gradle-local
+...
+
+%build
+gradle-local -s --offline ...
+%mvn_artifact ...
+
+%install
+%mvn_install -J ...
+
+%files -f .mfiles
+
+%files javadoc -f .mfiles-javadoc
+-------
+
+
+`gradle-local` is a wrapper script for `gradle` command which enables
+so called "local mode" of artifact resolution - artifacts are first
+resolved from local system before trying remote repositories (system
+Maven repositories are used through XMvn).
+
+In most simple cases calling `gradle-local` should be enough to
+resolve all dependencies, but sometimes additional patching of build
+script may be necessary. The following example patch adds XMvn
+resolver to make Gradle correctly resolve dependencies of build script
+itself.
+
+.Patch enabling local mode
+[source,patch]
+--------
+diff --git a/buildSrc/build.gradle b/buildSrc/build.gradle
+index a3cb553..50dd2a4 100644
+--- a/buildSrc/build.gradle
++++ b/buildSrc/build.gradle
+@@ -21,6 +21,7 @@ apply plugin: 'idea'
+ apply plugin: 'eclipse'
+
+ repositories {
++ xmvn()
+ maven { url 'https://repo.gradle.org/gradle/libs' }
+ mavenCentral()
+ }
+-------
+
+
+Once Gradle build completes, all relevant artifacts must be marked
+using `%mvn_artifact` macro for later installation. `%mvn_install`
+automatically handles installation of all marked artifacts and
+generates of `.mfiles` file lists, which are used to define package
+contents through `%file` sections.
+
diff --git a/doc/index.txt b/doc/index.txt
index 83008c7..ded0275 100644
--- a/doc/index.txt
+++ b/doc/index.txt
@@ -42,6 +42,10 @@ include::ant.txt[]
== Maven
include::maven.txt[]
+[[gradle]]
+== Gradle
+include::gradle.txt[]
+
== Common Errors
include::common_errors.txt[]
8 years, 9 months
Broken dependencies: bookkeeper
by Fedora Koji Build System
bookkeeper has broken dependencies in the rawhide tree:
On x86_64:
libhedwig-4.2.1-16.fc23.x86_64 requires libboost_thread.so.1.57.0()(64bit)
libhedwig-4.2.1-16.fc23.x86_64 requires libboost_system.so.1.57.0()(64bit)
On i386:
libhedwig-4.2.1-16.fc23.i686 requires libboost_thread.so.1.57.0
libhedwig-4.2.1-16.fc23.i686 requires libboost_system.so.1.57.0
On armhfp:
libhedwig-4.2.1-16.fc23.armv7hl requires libboost_thread.so.1.57.0
libhedwig-4.2.1-16.fc23.armv7hl requires libboost_system.so.1.57.0
Please resolve this as soon as possible.
8 years, 9 months