https://bugzilla.redhat.com/show_bug.cgi?id=1147838
Bug ID: 1147838
Summary: jenkins: missing core plugins
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: msrb(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Description of problem:
Jenkins upstream bundles several plugins which used to be part of jenkins core.
Fedora should do the same.
Upstream WAR file contains:
ant.hpi
antisamy-markup-formatter.hpi
credentials.hpi
cvs.hpi
external-monitor-job.hpi
javadoc.hpi
junit.hpi
ldap.hpi
mailer.hpi
matrix-auth.hpi
matrix-project.hpi
maven-plugin.hpi
pam-auth.hpi
ssh-credentials.hpi
ssh-slaves.hpi
subversion.hpi
translation.hpi
windows-slaves.hpi
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=n51XhdWxRj&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1147833
Bug ID: 1147833
Summary: jenkins: Dependency bloat
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Created attachment 942617
--> https://bugzilla.redhat.com/attachment.cgi?id=942617&action=edit
dnf log
Description of problem:
Jenkins seems to have a lot of unnecessary dependencies. When installed it
takes 400 MB of disk space (with dependencies, but without OpenJDK).
Upstream binary rpm is 95 MB (66 MB installed).
Total download size: 241 M
Installed size: 397 M
Version-Release number of selected component (if applicable):
1.581-2
Steps to Reproduce:
1. dnf install jenkins
Actual results:
see attachement
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mZvWdEQAiJ&a=cc_unsubscribe
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=958047
Bug ID: 958047
Summary: woodstox-core:
javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not
supported
Product: Fedora
Version: rawhide
Component: woodstox-core
Severity: unspecified
Priority: unspecified
Assignee: jcapik(a)redhat.com
Reporter: fweimer(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com, mizdebsk(a)redhat.com
Blocks: 958046
Category: ---
This doesn't work:
SAXParserFactory factory = new WstxSAXParserFactory();
factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true);
SAXParser parser = factory.newSAXParser();
InputSource is = new InputSource(new FileInputStream(args[0]));
parser.parse(is, new DefaultHandler());
It results in:
Exception in thread "main" org.xml.sax.SAXNotRecognizedException: Feature
'http://javax.xml.XMLConstants/feature/secure-processing' not recognized
As a result, it appears impossible to defend against "billion laughs"-style
denial of service attacks, along the lines of:
https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s…https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding/s…
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bPCdHpPVN2&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1266638
Bug ID: 1266638
Summary: maven-plugin-bundle-3.0.0 is available
Product: Fedora
Version: rawhide
Component: maven-plugin-bundle
Keywords: FutureFeature, Triaged
Assignee: msimacek(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com
Latest upstream release: 3.0.0
Current version/release in rawhide: 2.5.4-1.fc24
URL: http://repo2.maven.org/maven2/org/apache/felix/maven-bundle-plugin/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=nlhatFc4hw&a=cc_unsubscribe