[Bug 1256846] New: CVE-2015-3271 tika: Information disclosure vulnerability when running Apache Tika Server
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1256846
Bug ID: 1256846
Summary: CVE-2015-3271 tika: Information disclosure
vulnerability when running Apache Tika Server
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
Apache Tika provides optional functionality to run itself as a web service to
allow remote use. When used in this
manner, it's possible for a 3rd party to pass a 'fileUrl' header to the Apache
Tika Server (tika-server).
This header lets a remote client request that the server fetches content from
the URL provided, including files
from the server's local filesystem.
Depending on the file permissions set on the local filesystem, this could be
used to return sensitive content from
the server machine.
This vulnerability only exists if you are running the tika-server version 1.9,
and you allow un-trusted access
to the tika-server URL. Usage of Apache Tika as a standard library is not
affected.
Mitigation:
Apache Tika 1.9 users should upgrade to Apache Tika 1.10
Reference:
http://seclists.org/oss-sec/2015/q3/350
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=xPLyyXltSK&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...
8 years, 7 months
[Bug 1264088] New: Connecting IPhone causes computer to immediately hibernate
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1264088
Bug ID: 1264088
Summary: Connecting IPhone causes computer to immediately
hibernate
Product: Fedora
Version: 22
Component: hibernate
Severity: urgent
Assignee: puntogil(a)libero.it
Reporter: fcashman(a)email.sc.edu
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
Description of problem:
Plug in IPhone 6 via USB port, get message that says "Unable to mount Francie's
IPhone 6", then immediately "UPS is below critical level and will hibernate."
Computer shuts down immediately even if I unplug the phone quickly. I restart
the computer and the UPS is at 100%. Problem repeats when IPhone is plugged
back in.
Version-Release number of selected component (if applicable): 22
How reproducible: Every time
Steps to Reproduce:
1. Plug in IPhone
2. Wait approximately 2 seconds
3. BOOM
Actual results: Immediate hiberation. Thankfully I had just backed up my work.
I wouldn't have thought plugging in my phone would mess with the power supply
somehow. It worked fine on 21, but this is the first time I've plugged it in on
22.
Expected results: I expect the OS to ask if I want to view the contents of my
phone somehow, like it used to on 21.
Additional info: Help me.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=qBaG4Iyouj&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...
8 years, 7 months
[Bug 1256172] New: lucene-5.3.0 is available
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1256172
Bug ID: 1256172
Summary: lucene-5.3.0 is available
Product: Fedora
Version: rawhide
Component: lucene
Keywords: FutureFeature, Triaged
Assignee: akurtako(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com,
eclipse-sig(a)lists.fedoraproject.org,
hicham.haouari(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
msimacek(a)redhat.com, puntogil(a)libero.it,
rgrunber(a)redhat.com
Latest upstream release: 5.3.0
Current version/release in rawhide: 5.2.1-3.fc23
URL: http://lucene.apache.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=TLOVlOjsu3&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...
8 years, 7 months