[Bug 1402199] New: netty build for EPEL7
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1402199
Bug ID: 1402199
Summary: netty build for EPEL7
Product: Fedora
Version: 25
Component: netty
Assignee: jerboaa(a)gmail.com
Reporter: iwienand(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, msimacek(a)redhat.com
Hi,
We would like to get zookeeper packages for EPEL7, and netty is one hard
requirement for getting that to work.
---
DEBUG util.py:421: Error: No Package found for mvn(io.netty:netty-tcnative)
DEBUG util.py:421: Error: No Package found for mvn(log4j:log4j:12)
DEBUG util.py:421: Error: No Package found for
mvn(org.jboss.logging:jboss-logging)
DEBUG util.py:421: Error: No Package found for
mvn(org.jboss.marshalling:jboss-marshalling)
---
A COPR build [1] suggests maybe it's not too far off. I'm filing this bug for
tracking and coordination of interested parties.
[1]
https://copr-be.cloud.fedoraproject.org/results/iwienand/centos7-zookeepe...
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1401161] New: Updating to latest packages of jenkins prevents jenkins from properly starting
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1401161
Bug ID: 1401161
Summary: Updating to latest packages of jenkins prevents
jenkins from properly starting
Product: Fedora
Version: 25
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: dhill(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Description of problem:
Updating to latest packages of jenkins prevents jenkins from properly starting
java.io.FileNotFoundException: /usr/share/jenkins/webroot/WEB-INF/lib/jtidy.jar
(Too many levels of symbolic links)
java.io.FileNotFoundException:
/usr/share/jenkins/webroot/WEB-INF/lib/mina-core.jar (Too many levels of
symbolic links)
java.io.FileNotFoundException:
/usr/share/jenkins/webroot/WEB-INF/lib/mina-core.jar (Too many levels of
symbolic links)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at
org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:286)
at org.eclipse.jetty.webapp.JarScanner.matched(JarScanner.java:151)
at
org.eclipse.jetty.util.PatternMatcher.matchPatterns(PatternMatcher.java:100)
at org.eclipse.jetty.util.PatternMatcher.match(PatternMatcher.java:82)
at org.eclipse.jetty.webapp.JarScanner.scan(JarScanner.java:84)
at
org.eclipse.jetty.webapp.MetaInfConfiguration.preConfigure(MetaInfConfiguration.java:84)
at
org.eclipse.jetty.webapp.WebAppContext.preConfigure(WebAppContext.java:457)
at
winstone.HostConfiguration$1.preConfigure(HostConfiguration.java:166)
at
org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:493)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at
org.eclipse.jetty.server.handler.HandlerWrapper.doStart(HandlerWrapper.java:95)
at org.eclipse.jetty.server.Server.doStart(Server.java:282)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at winstone.Launcher.<init>(Launcher.java:152)
at winstone.Launcher.main(Launcher.java:352)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at Main._main(Main.java:290)
at Main.main(Main.java:104)
Dec 02, 2016 11:19:13 PM org.eclipse.jetty.util.log.JavaUtilLog info
INFO: Started SelectChannelConnector@0.0.0.0:8080
Dec 02, 2016 11:19:13 PM winstone.Logger logInternal
INFO: Winstone Servlet Engine v2.0 running: controlPort=disabled
Dec 02, 2016 11:23:06 PM winstone.Logger logInternal
INFO: JVM is terminating. Shutting down Winstone
Dec 02, 2016 11:23:07 PM org.eclipse.jetty.util.log.JavaUtilLog info
INFO: jetty-8.1.17.v20150415
Dec 02, 2016 11:23:07 PM org.eclipse.jetty.util.log.JavaUtilLog warn
WARNING: Failed startup of context
w.{,file:/usr/share/jenkins/webroot/},/usr/share/jenkins/webroot
java.io.FileNotFoundException:
/usr/share/jenkins/webroot/WEB-INF/lib/mina-core.jar (Too many levels of
symbolic links)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at
org.eclipse.jetty.util.resource.FileResource.getInputStream(FileResource.java:286)
at org.eclipse.jetty.webapp.JarScanner.matched(JarScanner.java:151)
at
org.eclipse.jetty.util.PatternMatcher.matchPatterns(PatternMatcher.java:100)
at org.eclipse.jetty.util.PatternMatcher.match(PatternMatcher.java:82)
at org.eclipse.jetty.webapp.JarScanner.scan(JarScanner.java:84)
at
org.eclipse.jetty.webapp.MetaInfConfiguration.preConfigure(MetaInfConfiguration.java:84)
at
org.eclipse.jetty.webapp.WebAppContext.preConfigure(WebAppContext.java:457)
at
winstone.HostConfiguration$1.preConfigure(HostConfiguration.java:166)
at
org.eclipse.jetty.webapp.WebAppContext.doStart(WebAppContext.java:493)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at
org.eclipse.jetty.server.handler.HandlerWrapper.doStart(HandlerWrapper.java:95)
at org.eclipse.jetty.server.Server.doStart(Server.java:282)
at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:64)
at winstone.Launcher.<init>(Launcher.java:152)
at winstone.Launcher.main(Launcher.java:352)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:498)
at Main._main(Main.java:290)
at Main.main(Main.java:104)
Version-Release number of selected component (if applicable):
Dec 02 22:52:35 DEBUG ---> Package jenkins.noarch 1.651.3-1.fc25 will be
upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins.noarch 1.651.3-2.fc25 will be an
upgrade
Dec 02 22:52:35 DEBUG ---> Package jenkins-webapp.noarch 1.651.3-1.fc25 will be
upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins-webapp.noarch 1.651.3-2.fc25 will be
an upgrade
Dec 02 22:52:35 DEBUG ---> Package jenkins-cli.noarch 1.651.3-1.fc25 will be
upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins-cli.noarch 1.651.3-2.fc25 will be an
upgrade
Dec 02 22:52:35 DEBUG ---> Package jenkins-core.noarch 1.651.3-1.fc25 will be
upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins-core.noarch 1.651.3-2.fc25 will be
an upgrade
Dec 02 22:52:35 DEBUG ---> Package jenkins-remoting.noarch 2.59-1.fc25 will be
upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins-remoting.noarch 2.62.3-1.fc25 will
be an upgrade
Dec 02 22:52:35 DEBUG ---> Package jenkins-remoting-webapp.noarch 2.59-1.fc25
will be upgraded
Dec 02 22:52:35 DEBUG ---> Package jenkins-remoting-webapp.noarch 2.62.3-1.fc25
will be an upgrade
How reproducible:
This time
Steps to Reproduce:
1. Update from 2.62.3-1 to 2.62.3-2
2.
3.
Actual results:
Fails to properly start
Expected results:
Start properly
Additional info:
I deleted the symlinks and restarted the service which started but idk in which
state is now my jenkins instance.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1330472] New: Jenkins returns HTTP/1.1 503 Service Unavailable
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1330472
Bug ID: 1330472
Summary: Jenkins returns HTTP/1.1 503 Service Unavailable
Product: Fedora
Version: 24
Component: jenkins
Severity: high
Assignee: msrb(a)redhat.com
Reporter: hegjon(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Created attachment 1150831
--> https://bugzilla.redhat.com/attachment.cgi?id=1150831&action=edit
/var/log/jenkins/jenkins.log
Description of problem:
When accessing the user interface by http://localhost:8080 I get this error:
HTTP ERROR: 503
Problem accessing /. Reason:
Service Unavailable
Powered by Jetty://
Version-Release number of selected component (if applicable):
$ rpm -qa|grep jenkins
jenkins-json-lib-2.4-10.fc24.noarch
jenkins-mailer-plugin-1.16-2.fc24.noarch
jenkins-1.642.2-2.fc24.noarch
jenkins-extras-memory-monitor-1.9-3.fc24.noarch
jenkins-ldap-plugin-1.11-3.fc24.noarch
jenkins-xstream-1.4.7-8.jenkins1.fc24.noarch
jenkins-pam-auth-plugin-1.2-3.fc24.noarch
jenkins-junit-plugin-1.11-1.fc24.noarch
jenkins-ssh-slaves-plugin-1.10-3.fc24.noarch
jenkins-matrix-auth-plugin-1.2-3.fc24.noarch
js-yui2-jenkins-2.9.0-10.fc24.noarch
jenkins-executable-war-webroot-1.29-6.fc24.noarch
jenkins-instance-identity-1.4-5.fc24.noarch
jenkins-jexl-1.1-5.20111212.fc24.noarch
jenkins-ssh-credentials-plugin-1.11-4.fc24.noarch
jenkins-external-monitor-job-plugin-1.4-4.fc24.noarch
jenkins-commons-jelly-1.1.20120928-10.fc24.noarch
jenkins-core-1.642.2-2.fc24.noarch
jenkins-remoting-2.55-1.fc24.noarch
jenkins-ssh-cli-auth-1.2-8.fc24.noarch
trilead-ssh2-217-7.jenkins8.fc24.noarch
jenkins-icon-shim-1.0.4-4.fc24.noarch
jenkins-credentials-plugin-1.24-3.fc24.noarch
jenkins-sshd-1.6-7.fc24.noarch
jenkins-winstone-2.8-5.fc24.noarch
jenkins-script-security-plugin-1.15-2.fc24.noarch
jenkins-crypto-util-1.4-6.fc24.noarch
jenkins-version-number-1.1-6.fc24.noarch
jenkins-remoting-webapp-2.55-1.fc24.noarch
jenkins-ant-plugin-1.2-6.fc24.noarch
jenkins-cli-1.642.2-2.fc24.noarch
jenkins-antisamy-markup-formatter-plugin-1.3-2.fc24.noarch
jenkins-matrix-project-plugin-1.6-2.fc24.noarch
jenkins-task-reactor-1.4-4.fc24.noarch
jenkins-webapp-1.642.2-2.fc24.noarch
jenkins-javadoc-plugin-1.3-4.fc24.noarch
How reproducible:
Steps to Reproduce:
1. # rm -rf /var/lib/jenkins
2. # dnf install jenkins -y
3. # systemctl start jenkins.service
4. $ curl localhost:8080
Actual results:
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"/>
<title>Error 503 Service Unavailable</title>
</head>
<body>
<h2>HTTP ERROR: 503</h2>
<p>Problem accessing /. Reason:
<pre> Service Unavailable</pre></p>
<hr /><i><small>Powered by Jetty://</small></i>
</body>
</html>
Expected results:
HTTP 200 OK
Additional info:
# systemctl status jenkins.service
● jenkins.service - Jenkins continuous build server
Loaded: loaded (/usr/lib/systemd/system/jenkins.service; disabled; vendor
preset: disabled)
Active: active (running) since Tue 2016-04-26 11:03:25 WEST; 2min 39s ago
Process: 10247 ExecStop=/usr/libexec/jenkins/jenkins stop (code=exited,
status=0/SUCCESS)
Process: 10299 ExecStart=/usr/libexec/jenkins/jenkins start (code=exited,
status=0/SUCCESS)
Main PID: 10364 (java)
Tasks: 36 (limit: 512)
CGroup: /system.slice/jenkins.service
└─10364 /etc/alternatives/java -Dcom.sun.akuma.Daemon=daemonized
-Djava.awt.headless=true -DJENKINS_HOME=/var/lib/jenkins -cp
/usr/share/jenkins/
Apr 26 11:03:25 jonny-dell systemd[1]: Starting Jenkins continuous build
server...
Apr 26 11:03:25 jonny-dell runuser[10345]: pam_unix(runuser:session): session
opened for user jenkins by (uid=0)
Apr 26 11:03:25 jonny-dell runuser[10345]: pam_unix(runuser:session): session
closed for user jenkins
Apr 26 11:03:25 jonny-dell jenkins[10299]: Starting Jenkins [ OK ]
Apr 26 11:03:25 jonny-dell systemd[1]: Started Jenkins continuous build server.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1311085] New: CVE-2015-5346 Apache Tomcat Session fixation
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1311085
Bug ID: 1311085
Summary: CVE-2015-5346 Apache Tomcat Session fixation
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: twalsh(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
alee(a)redhat.com, asantos(a)redhat.com,
bbaranow(a)redhat.com, bdawidow(a)redhat.com,
bmaxwell(a)redhat.com, brms-jira(a)redhat.com,
ccoleman(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, csutherl(a)redhat.com,
dandread(a)redhat.com, darran.lofthouse(a)redhat.com,
dknox(a)redhat.com, dmcphers(a)redhat.com,
epp-bugs(a)redhat.com, etirelli(a)redhat.com,
fnasser(a)redhat.com, gvarsami(a)redhat.com,
hfnukal(a)redhat.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com, jason.greene(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jboss-set(a)redhat.com,
jbpapp-maint(a)redhat.com, jclere(a)redhat.com,
jcoleman(a)redhat.com, jdg-bugs(a)redhat.com,
jdoyle(a)redhat.com, jialiu(a)redhat.com,
joelsmith(a)redhat.com, jokerman(a)redhat.com,
jpallich(a)redhat.com, jshepherd(a)redhat.com,
kconner(a)redhat.com, krzysztof.daniel(a)gmail.com,
kseifried(a)redhat.com, ldimaggi(a)redhat.com,
lgao(a)redhat.com, lmeyer(a)redhat.com,
lpetrovi(a)redhat.com, mbabacek(a)redhat.com,
mbaluch(a)redhat.com, me(a)coolsvap.net,
miburman(a)redhat.com, mmccomas(a)redhat.com,
mweiler(a)redhat.com, mwinkler(a)redhat.com,
myarboro(a)redhat.com, nwallace(a)redhat.com,
pavelp(a)redhat.com, pcheung(a)redhat.com,
pgier(a)redhat.com, psakar(a)redhat.com,
pslavice(a)redhat.com, rnetuka(a)redhat.com,
rrajasek(a)redhat.com, rsvoboda(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com,
spinder(a)redhat.com, tcunning(a)redhat.com,
theute(a)redhat.com, tkirby(a)redhat.com,
ttarrant(a)redhat.com, twalsh(a)redhat.com,
vtunka(a)redhat.com, weli(a)redhat.com
When recycling the Request object to use for a new request, the
requestedSessionSSL field was not recycled. This meant that a session ID
provided in the next request to be processed using the recycled Request object
could be used when it should not have been. This gave the client the ability to
control the session ID. In theory, this could have been used as part of a
session fixation attack but it would have been hard to achieve as the attacker
would not have been able to force the victim to use the 'correct' Request
object. It was also necessary for at least one web application to be configured
to use the SSL session ID as the HTTP session ID. This is not a common
configuration.
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1311093] New: CVE-2016-0763 tomcat: security manager bypass via setGlobalContext()
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1311093
Bug ID: 1311093
Summary: CVE-2016-0763 tomcat: security manager bypass via
setGlobalContext()
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
alee(a)redhat.com, asantos(a)redhat.com,
bbaranow(a)redhat.com, bdawidow(a)redhat.com,
bmaxwell(a)redhat.com, brms-jira(a)redhat.com,
ccoleman(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, csutherl(a)redhat.com,
dandread(a)redhat.com, darran.lofthouse(a)redhat.com,
dknox(a)redhat.com, dmcphers(a)redhat.com,
epp-bugs(a)redhat.com, etirelli(a)redhat.com,
fnasser(a)redhat.com, gvarsami(a)redhat.com,
hfnukal(a)redhat.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com, jason.greene(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jboss-set(a)redhat.com,
jclere(a)redhat.com, jcoleman(a)redhat.com,
jdg-bugs(a)redhat.com, jdoyle(a)redhat.com,
jialiu(a)redhat.com, joelsmith(a)redhat.com,
jokerman(a)redhat.com, jpallich(a)redhat.com,
jshepherd(a)redhat.com, kconner(a)redhat.com,
krzysztof.daniel(a)gmail.com, kseifried(a)redhat.com,
ldimaggi(a)redhat.com, lgao(a)redhat.com,
lmeyer(a)redhat.com, lpetrovi(a)redhat.com,
mbabacek(a)redhat.com, mbaluch(a)redhat.com,
me(a)coolsvap.net, miburman(a)redhat.com,
mmccomas(a)redhat.com, mweiler(a)redhat.com,
mwinkler(a)redhat.com, myarboro(a)redhat.com,
nwallace(a)redhat.com, pavelp(a)redhat.com,
pcheung(a)redhat.com, pgier(a)redhat.com,
psakar(a)redhat.com, pslavice(a)redhat.com,
rnetuka(a)redhat.com, rrajasek(a)redhat.com,
rsvoboda(a)redhat.com, rwagner(a)redhat.com,
rzhang(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com,
spinder(a)redhat.com, tcunning(a)redhat.com,
theute(a)redhat.com, tkirby(a)redhat.com,
ttarrant(a)redhat.com, twalsh(a)redhat.com,
vtunka(a)redhat.com, weli(a)redhat.com
ResourceLinkFactory.setGlobalContext() is a public method and was
accessible by web applications running under a security manager
without any checks. This allowed a malicious web application to inject
a malicious global context that could in turn be used to disrupt other
web applications and/or read and write data owned by other web
applications.
External references:
http://seclists.org/bugtraq/2016/Feb/147
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1395174] New: CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1395174
Bug ID: 1395174
Summary: CVE-2016-9299 jenkins: Java deserialization flaw leads
to RCE [fedora-all]
Product: Fedora
Version: 24
Component: jenkins
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: msrb(a)redhat.com
Reporter: amaris(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Blocks: 1395172 (CVE-2016-9299)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1395172
[Bug 1395172] CVE-2016-9299 jenkins: Java deserialization flaw leads to RCE
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months
[Bug 1403825] New: CVE-2016-8745 tomcat: information disclosure due to incorrect Processor sharing [fedora-all]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1403825
Bug ID: 1403825
Summary: CVE-2016-8745 tomcat: information disclosure due to
incorrect Processor sharing [fedora-all]
Product: Fedora
Version: 25
Component: tomcat
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: ivan.afonichev(a)gmail.com
Reporter: mprpic(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, csutherl(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, me(a)coolsvap.net,
trick(a)vanstaveren.us
Blocks: 1403824 (CVE-2016-8745)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1403824
[Bug 1403824] CVE-2016-8745 tomcat: information disclosure due to incorrect
Processor sharing
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years, 2 months