java-sig-commits July 2016

java-sig-commits@lists.fedoraproject.org

2 participants
255 discussions

[Bug 1317516] New: CVE-2016-0782 activemq: Cross-site scripting vulnerabilities in web console
by Red Hat Bugzilla 13 Jul '16

13 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=1317516 Bug ID: 1317516 Summary: CVE-2016-0782 activemq: Cross-site scripting vulnerabilities in web console Product: Security Response Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: amaris(a)redhat.com CC: abhgupta(a)redhat.com, agrimm(a)redhat.com, aileenc(a)redhat.com, ccoleman(a)redhat.com, chazlett(a)redhat.com, dmcphers(a)redhat.com, gvarsami(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jcoleman(a)redhat.com, jialiu(a)redhat.com, joelsmith(a)redhat.com, jokerman(a)redhat.com, kconner(a)redhat.com, kseifried(a)redhat.com, ldimaggi(a)redhat.com, lmeyer(a)redhat.com, mmccomas(a)redhat.com, nwallace(a)redhat.com, pavelp(a)redhat.com, puntogil(a)libero.it, rwagner(a)redhat.com, soa-p-jira(a)post-office.corp.redhat.com, s(a)shk.io, tcunning(a)redhat.com, tdawson(a)redhat.com, tiwillia(a)redhat.com, tkirby(a)redhat.com Several instances of cross-site scripting vulnerabilities were identified to be present in the web based administration console as well as the ability to trigger a Java memory dump into an arbitrary folder. The root cause of these issues are improper user data output validation and incorrect permissions configured on Jolokia. Affected versions: ActiveMQ 5.0.0 - 5.13.1 External Reference: http://activemq.apache.org/security-advisories.data/CVE-2016-0782-announcem… -- You are receiving this mail because: You are on the CC list for the bug.

1 18

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 13 Jul '16

13 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1352091 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1352091 [Bug 1352091] Review Request: enunciate (Re-review: enunciate-core-annotations) - Build-time enhancement tool for Java-based Web services projects -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 1344679] New: xmvn tries to install nonexistent pom of pomless artifact
by Red Hat Bugzilla 12 Jul '16

12 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=1344679 Bug ID: 1344679 Summary: xmvn tries to install nonexistent pom of pomless artifact Product: Fedora Version: rawhide Component: xmvn Assignee: mizdebsk(a)redhat.com Reporter: msimacek(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, msimacek(a)redhat.com, msrb(a)redhat.com Description of problem: xmvn cannot install artifacts that use tycho-pomless, because it tries to install polyglot's dummy placeholder. [ERROR] Artifact installation failed org.fedoraproject.xmvn.tools.install.ArtifactInstallationException: Artifact path points to a non-existent file: /builddir/build/BUILD/eclipse-abrt-0.0.3/org.fedoraproject.abrt/.polyglot.build.properties at org.fedoraproject.xmvn.tools.install.impl.InstallationPlan.validate(InstallationPlan.java:97) at org.fedoraproject.xmvn.tools.install.impl.InstallationPlan.<init>(InstallationPlan.java:56) at org.fedoraproject.xmvn.tools.install.impl.DefaultInstaller.install(DefaultInstaller.java:298) at org.fedoraproject.xmvn.tools.install.cli.InstallerCli.run(InstallerCli.java:65) at org.fedoraproject.xmvn.tools.install.cli.InstallerCli.main(InstallerCli.java:86) Version-Release number of selected component (if applicable): xmvn-2.5.0-8.fc25.noarch How reproducible: always Steps to Reproduce: 1. rebuild eclipse-abrt (from git) -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1340396] CVE-2016-2175 pdfbox: XML External Entity vulnerability
by Red Hat Bugzilla 12 Jul '16

12 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=1340396 Bug 1340396 depends on bug 1340397, which changed state. Bug 1340397 Summary: CVE-2016-2175 pdfbox: XML External Entity vulnerability [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1340397 What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |CLOSED Resolution|--- |ERRATA -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1340396] CVE-2016-2175 pdfbox: XML External Entity vulnerability
by Red Hat Bugzilla 12 Jul '16

12 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=1340396 --- Comment #2 from Fedora Update System <updates(a)fedoraproject.org> --- pdfbox-1.8.8-6.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1353905] CVE-2016-5007 springframework-security: spring: Path matching inconsistency [fedora-all]
by Red Hat Bugzilla 11 Jul '16

11 Jul '16

1 0

[Bug 1353904] CVE-2016-5007 springframework: spring: Path matching inconsistency [fedora-all]
by Red Hat Bugzilla 11 Jul '16

11 Jul '16

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 09 Jul '16

09 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1346382 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1346382 [Bug 1346382] Review Request: picketlink - Features for securing Java EE6 applications -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 09 Jul '16

09 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1354118 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1354118 [Bug 1354118] Review Request: protoparser - Java parser for .proto schema declarations -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

[Bug 652183] Java SIG tracker bug
by Red Hat Bugzilla 09 Jul '16

09 Jul '16

https://bugzilla.redhat.com/show_bug.cgi?id=652183 gil cattaneo <puntogil(a)libero.it> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On|1321687 | Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1321687 [Bug 1321687] Review Request: qpid-java - Apache Qpid Java Components -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits July 2016