[Bug 1293636] New: Systemd tomcat.service unit loads
/etc/sysconfig/tomcat without shell expansion
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1293636
Bug ID: 1293636
Summary: Systemd tomcat.service unit loads
/etc/sysconfig/tomcat without shell expansion
Product: Fedora
Version: 23
Component: tomcat
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: csutherl(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, ant(a)symons.net.au,
csutherl(a)redhat.com, gnaik(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, lcosti(a)redhat.com,
martijn(a)xbsd.nl, mbabacek(a)redhat.com, me(a)coolsvap.net,
mpicoto(a)redhat.com, rbost(a)redhat.com,
redhat.mx(a)jules.de, william(a)firstyear.id.au
Depends On: 1221896
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1221896
[Bug 1221896] Tomcat 7.0.42-8 tomcat.service loads /etc/sysconfig/tomcat
without shell expansion
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=8ZuZPmnprX&a=cc_unsubscribe
7 years, 5 months
[Bug 1257246] New: CVE-2015-6524 activemq: LDAPLoginModule implementation allows wildcard operators in usernames
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1257246
Bug ID: 1257246
Summary: CVE-2015-6524 activemq: LDAPLoginModule implementation
allows wildcard operators in usernames
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: agrimm(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com, s(a)shk.io,
tdawson(a)redhat.com, weli(a)redhat.com
Common Vulnerabilities and Exposures assigned an identifier CVE-2015-6524 to
the following vulnerability:
The LDAPLoginModule implementation the Java Authentication and Authorization
Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators
in usernames, which allows remote attackers to obtain credentials via a brute
force attack.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kJ763Ve2az&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...
7 years, 6 months
[Bug 998251] New: activemq 5.8.0 is available
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=998251
Bug ID: 998251
Summary: activemq 5.8.0 is available
Product: Fedora
Version: rawhide
Component: activemq
Assignee: mspaulding06(a)gmail.com
Reporter: puntogil(a)libero.it
QA Contact: extras-qa(a)fedoraproject.org
CC: agrimm(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mspaulding06(a)gmail.com, tdawson(a)redhat.com
Created attachment 787792
--> https://bugzilla.redhat.com/attachment.cgi?id=787792&action=edit
update to 5.8.0
Upstream released activemq 5.8.0. Currently, we still have version 5.6.0 in
Rawhide. Please consider updating, patch is attached.
changes in spaec file
- update to 5.8.0
- built with XMvn
- adapt to current guideline
- obsoletes activemq-core activemq-kahadb
- built new modules:
° amq-store, broker, console, jdbc-store,
° log4j-appender, mqtt, openwire-generator,
° openwire-legacy, pool, ra, tooling
(ra module is required by Apache OpenEJB/Tomee 4.5.1)
- fix for CVE-2013-1879 (PATCH0)
- fix for rhbz#991956
NOTE some features cannot be avalaible, cause: require
com.thoughtworks.xstream:xstream:1.4.4
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AN1TJhSLSq&a=cc_unsubscribe
7 years, 8 months