[Bug 1203652] New: tomcat: Duplicate Maven metadata for tomcat-jdbc
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1203652
Bug ID: 1203652
Summary: tomcat: Duplicate Maven metadata for tomcat-jdbc
Product: Fedora
Version: 22
Component: tomcat
Keywords: Regression
Assignee: ivan.afonichev(a)gmail.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, sgallagh(a)redhat.com
Description of problem:
Tomcat installs duplicate metadata for tomcat-jdbc Maven artifact.
Version-Release number of selected component (if applicable):
7.0.59-3
Steps to Reproduce:
xmvn-resolve org.apache.tomcat:tomcat-jdbc
Actual results:
[WARNING] Ignoring metadata for artifact
org.apache.tomcat:tomcat-jdbc:jar:SYSTEM as it has duplicate metadata
[WARNING] Ignoring metadata for artifact
org.apache.tomcat:tomcat-jdbc:pom:SYSTEM as it has duplicate metadata
[ERROR] Unable to resolve artifact org.apache.tomcat:tomcat-jdbc:jar:SYSTEM
Expected results:
/usr/share/java/tomcat/tomcat-jdbc.jar
Additional info:
Regression was introduced in:
commit ce74ddbcd3beba22fb70cd2dc890efa7409bf97f
Author: Stephen Gallagher <sgallagh(a)redhat.com>
Date: Tue Mar 3 14:58:21 2015 -0500
Revert to Tomcat 7
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=wfJxJ9VXJ8&a=cc_unsubscribe
8 years, 3 months
[Bug 1301160] New: itext-toolbox wrapper doesn't worki
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1301160
Bug ID: 1301160
Summary: itext-toolbox wrapper doesn't worki
Product: Fedora
Version: 23
Component: itext
Assignee: puntogil(a)libero.it
Reporter: luto(a)kernel.org
QA Contact: extras-qa(a)fedoraproject.org
CC: andjrobins(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jochen(a)herr-schmitt.de, puntogil(a)libero.it
itext-toolbox fails:
$ itext-toolbox
Java virtual machine used: /usr/share/java-utils/java-wrapper
classpath used:
/usr/share/java/bcprov.jar:/usr/share/java/bcmail.jar:/usr/share/java/bctsp.jar:/usr/share/java/itext.jar:/usr/share/java/itext-toolbox.jar
main class used: com.lowagie.toolbox.Toolbox
flags used:
options used: '-cp
/usr/share/java/bcprov.jar:/usr/share/java/bcmail.jar:/usr/share/java/bctsp.jar:/usr/share/java/itext.jar:/usr/share/java/itext-toolbox.jar'
arguments used:
Unrecognized option: -cp
/usr/share/java/bcprov.jar:/usr/share/java/bcmail.jar:/usr/share/java/bctsp.jar:/usr/share/java/itext.jar:/usr/share/java/itext-toolbox.jar
Error: Could not create the Java Virtual Machine.
Error: A fatal exception has occurred. Program will exit.
I think the right fix is to switch to %jpackage_script. See
https://fedoraproject.org/wiki/Packaging:Java#Wrapper_Scripts
--
You are receiving this mail because:
You are on the CC list for the bug.
8 years, 3 months
[Bug 1004916] New: Package doesn't provide a sysvinit script or systemd service unit
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1004916
Bug ID: 1004916
Summary: Package doesn't provide a sysvinit script or systemd
service unit
Product: Fedora
Version: 19
Component: activemq
Severity: high
Assignee: mspaulding06(a)gmail.com
Reporter: skottler(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: agrimm(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mspaulding06(a)gmail.com, tdawson(a)redhat.com
Description of problem:
activemq doesn't provide the necessary scripts/config files to start.
Version-Release number of selected component (if applicable):
0:5.6.0-5.fc19
How reproducible:
Always.
Steps to Reproduce:
1. yum install -y activemq activemq-core
2. try starting the service
3. note there is not a service unit
This seems like a fairly major thing to be missing in the packages. Is there
another package or metapackage that needs to be installed for it to work?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=IC3tNZ0uDP&a=cc_unsubscribe
8 years, 3 months
[Bug 1205627] New: CVE-2015-1810 jenkins: HudsonPrivateSecurityRealm allows creation of reserved names (SECURITY-166)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205627
Bug ID: 1205627
Summary: CVE-2015-1810 jenkins: HudsonPrivateSecurityRealm
allows creation of reserved names (SECURITY-166)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
For users using "'Jenkins' own user database" setting, Jenkins doesn't refuse
reserved names, thus allowing privilege escalation.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=KqlcbN0dDQ&a=cc_unsubscribe
8 years, 3 months
[Bug 1205622] New: CVE-2015-1807 jenkins: directory traversal from artifacts via symlink (SECURITY-162)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205622
Bug ID: 1205622
Summary: CVE-2015-1807 jenkins: directory traversal from
artifacts via symlink (SECURITY-162)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
This vulnerability allows users with the job configuration privilege or users
with commit access to the build script to access arbitrary files/directories on
the master, resulting in the exposure of sensitive information, such as
encryption keys.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vs9xNW7rJ9&a=cc_unsubscribe
8 years, 3 months
[Bug 1205620] New: CVE-2015-1806 jenkins: Combination filter Groovy script unsecured (SECURITY-125)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1205620
Bug ID: 1205620
Summary: CVE-2015-1806 jenkins: Combination filter Groovy
script unsecured (SECURITY-125)
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bleanhar(a)redhat.com, ccoleman(a)redhat.com,
dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com,
msrb(a)redhat.com
This vulnerability allows users with the job configuration privilege to
escalate his privileges, resulting in arbitrary code execution to the master.
External References:
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+20...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=G0xWdXgoFw&a=cc_unsubscribe
8 years, 3 months