https://bugzilla.redhat.com/show_bug.cgi?id=1293636
Bug ID: 1293636
Summary: Systemd tomcat.service unit loads
/etc/sysconfig/tomcat without shell expansion
Product: Fedora
Version: 23
Component: tomcat
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: csutherl(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, ant(a)symons.net.au,
csutherl(a)redhat.com, gnaik(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, lcosti(a)redhat.com,
martijn(a)xbsd.nl, mbabacek(a)redhat.com, me(a)coolsvap.net,
mpicoto(a)redhat.com, rbost(a)redhat.com,
redhat.mx(a)jules.de, william(a)firstyear.id.au
Depends On: 1221896
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1221896
[Bug 1221896] Tomcat 7.0.42-8 tomcat.service loads /etc/sysconfig/tomcat
without shell expansion
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=8ZuZPmnprX&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1257246
Bug ID: 1257246
Summary: CVE-2015-6524 activemq: LDAPLoginModule implementation
allows wildcard operators in usernames
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: agrimm(a)redhat.com, bleanhar(a)redhat.com,
ccoleman(a)redhat.com, dmcphers(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jdetiber(a)redhat.com, jialiu(a)redhat.com,
jkeck(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, kseifried(a)redhat.com,
lmeyer(a)redhat.com, mmccomas(a)redhat.com, s(a)shk.io,
tdawson(a)redhat.com, weli(a)redhat.com
Common Vulnerabilities and Exposures assigned an identifier CVE-2015-6524 to
the following vulnerability:
The LDAPLoginModule implementation the Java Authentication and Authorization
Service (JAAS) in Apache ActiveMQ 5.x before 5.10.1 allows wildcard operators
in usernames, which allows remote attackers to obtain credentials via a brute
force attack.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kJ763Ve2az&a=cc_unsubscribe
_______________________________________________
java-sig-commits mailing list
java-sig-commits(a)lists.fedoraproject.org
http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedoraproje…
https://bugzilla.redhat.com/show_bug.cgi?id=1166658
Bug ID: 1166658
Summary: xbean: Enable xbean-blueprint module
Product: Fedora
Version: rawhide
Component: xbean
Keywords: FutureFeature
Assignee: mizdebsk(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com
Depends On: 1166655
Description of problem:
xbean-blueprint is currently disabled due to dependency on newer version of
aries-blueprint (>= 1.0.0).
Version-Release number of selected component (if applicable):
4.1-1
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1166655
[Bug 1166655] aries-blueprint: Update to latest upstream version
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ztgLsAFA0o&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=998251
Bug ID: 998251
Summary: activemq 5.8.0 is available
Product: Fedora
Version: rawhide
Component: activemq
Assignee: mspaulding06(a)gmail.com
Reporter: puntogil(a)libero.it
QA Contact: extras-qa(a)fedoraproject.org
CC: agrimm(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mspaulding06(a)gmail.com, tdawson(a)redhat.com
Created attachment 787792
--> https://bugzilla.redhat.com/attachment.cgi?id=787792&action=edit
update to 5.8.0
Upstream released activemq 5.8.0. Currently, we still have version 5.6.0 in
Rawhide. Please consider updating, patch is attached.
changes in spaec file
- update to 5.8.0
- built with XMvn
- adapt to current guideline
- obsoletes activemq-core activemq-kahadb
- built new modules:
° amq-store, broker, console, jdbc-store,
° log4j-appender, mqtt, openwire-generator,
° openwire-legacy, pool, ra, tooling
(ra module is required by Apache OpenEJB/Tomee 4.5.1)
- fix for CVE-2013-1879 (PATCH0)
- fix for rhbz#991956
NOTE some features cannot be avalaible, cause: require
com.thoughtworks.xstream:xstream:1.4.4
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=AN1TJhSLSq&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1146661
Bug ID: 1146661
Summary: tika 1.6 is available
Product: Fedora
Version: rawhide
Component: tika
Assignee: puntogil(a)libero.it
Reporter: puntogil(a)libero.it
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
tika 1.6 is available
consider upgrading
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=f0X60AI3xi&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1267936
Bug ID: 1267936
Summary: tomcat-8.0.27 is available
Product: Fedora
Version: rawhide
Component: tomcat
Keywords: FutureFeature, Triaged
Assignee: ivan.afonichev(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, me(a)coolsvap.net
Latest upstream release: 8.0.27
Current version/release in rawhide: 8.0.26-1.fc24
URL: http://tomcat.apache.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=2yFPFm39iH&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1095158
Bug ID: 1095158
Summary: maven-hpi-plugin: port to jetty 8/9
Product: Fedora
Version: rawhide
Component: maven-hpi-plugin
Severity: low
Assignee: msrb(a)redhat.com
Reporter: msrb(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Description of problem:
Part of the project depends on jetty 6. It would be nice to port it to latest
jetty (or jetty 8 if we want the change to be upstreamable).
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=O7Rh2c7UrW&a=cc_unsubscribe