[Bug 1212764] CVE-2015-2575 mysql-connector-java: unspecified vulnerability related to Connector/J (CPU April 2015)
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1212764
Pavel Polischouk <pavelp(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Whiteboard|impact=moderate,public=2015 |impact=moderate,public=2015
|0415,reported=20150415,sour |0415,reported=20150415,sour
|ce=internet,cvss2=4.9/AV:N/ |ce=internet,cvss2=4.9/AV:N/
|AC:M/Au:S/C:P/I:P/A:N,rhel- |AC:M/Au:S/C:P/I:P/A:N,rhel-
|6/mysql-connector-java=defe |6/mysql-connector-java=defe
|r,rhel-7/mysql-connector-ja |r,rhel-7/mysql-connector-ja
|va=defer,jdg-6/mysql-connec |va=defer,jdg-6/mysql-connec
|tor-java=defer,fsw-6/mysql- |tor-java=notaffected,fsw-6/
|connector-java=defer,jpp-6/ |mysql-connector-java=affect
|mysql-connector-java=defer, |ed,jpp-6/mysql-connector-ja
|fedora-all/mysql-connector- |va=affected,fedora-all/mysq
|java=affected,epel-5/mysql- |l-connector-java=affected,e
|connector-java=affected |pel-5/mysql-connector-java=
| |affected
--
You are receiving this mail because:
You are on the CC list for the bug.
8 years
[Bug 1271243] New: groovy-lib has unnecessary requires
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1271243
Bug ID: 1271243
Summary: groovy-lib has unnecessary requires
Product: Fedora
Version: rawhide
Component: groovy
Assignee: msrb(a)redhat.com
Reporter: msimacek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, msrb(a)redhat.com
Description of problem:
I think the groovy-lib subpackage was introduced to allow packages that use
groovy as embedded language to depend on it without pulling in a ton of
dependencies. But as of now, groovy-lib still pulls in ant, junit, testng etc.,
which I believe are not needed (are optional).
Version-Release number of selected component (if applicable):
groovy-lib-0:2.4.5-1.fc24.noarch
How reproducible:
always
Steps to Reproduce:
1. repoquery --requires groovy-lib
Actual results:
java-headless
jpackage-utils
mvn(bsf:bsf)
mvn(com.beust:jcommander)
mvn(com.thoughtworks.qdox:qdox)
mvn(commons-logging:commons-logging)
mvn(jline:jline)
mvn(junit:junit)
mvn(org.apache.ant:ant)
mvn(org.apache.ant:ant-antlr)
mvn(org.apache.ant:ant-junit)
mvn(org.apache.ant:ant-launcher)
mvn(org.testng:testng)
Expected results:
no requires on ant, junit, etc.
Additional info:
On the other hand, I'd expect objectweb-asm to be among requires, as that is
what groovy uses internally, isn't it?
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=FVkBniC3y2&a=cc_unsubscribe
8 years
[Bug 1312521] New: httpcomponents-client-4.5.2 is available
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1312521
Bug ID: 1312521
Summary: httpcomponents-client-4.5.2 is available
Product: Fedora
Version: rawhide
Component: httpcomponents-client
Keywords: FutureFeature, Triaged
Assignee: mizdebsk(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com,
mizdebsk(a)redhat.com, msimacek(a)redhat.com,
msrb(a)redhat.com
Latest upstream release: 4.5.2
Current version/release in rawhide: 4.5.1-4.fc24
URL: http://www.apache.org/dist/httpcomponents/httpclient/source/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
--
You are receiving this mail because:
You are on the CC list for the bug.
8 years, 1 month