java-sig-commits December 2017

java-sig-commits@lists.fedoraproject.org

1 participants
310 discussions

[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla＠redhat.com 08 Dec '17

08 Dec '17

1 0

[Bug 1523248] New: tomcat systemd does not cope with - in service names.
by bugzilla＠redhat.com 07 Dec '17

07 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1523248 Bug ID: 1523248 Summary: tomcat systemd does not cope with - in service names. Product: Fedora Version: rawhide Component: tomcat Severity: low Assignee: ivan.afonichev(a)gmail.com Reporter: csutherl(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, csutherl(a)redhat.com, ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, joe.madden(a)mottmac.com, krzysztof.daniel(a)gmail.com, me(a)coolsvap.net, systemd-maint-list(a)redhat.com, tomcat-qe(a)redhat.com Depends On: 1523112 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1523112 [Bug 1523112] tomcat systemd does not cope with - in service names. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1455267] New: lucene: Enable more modules in jp_minimal module
by bugzilla＠redhat.com 07 Dec '17

07 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1455267 Bug ID: 1455267 Summary: lucene: Enable more modules in jp_minimal module Product: Fedora Version: rawhide Component: lucene Keywords: FutureFeature Assignee: msimacek(a)redhat.com Reporter: mizdebsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, mat.booth(a)redhat.com, msimacek(a)redhat.com, rgrunber(a)redhat.com Eclipse Oxygen requires more lucene modules. At least these (possibly more): nothing provides lucene-misc >= 6.1.0 needed by eclipse-platform-1:4.7.0-0.12.fc27.x86_64 nothing provides lucene-grouping needed by eclipse-m2e-core-1.7.1-0.3.git3aeac6a.fc26.noarch Please enable them in jp_minimal profile in the spec file. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla＠redhat.com 07 Dec '17

07 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1462702 Pedro Sampaio <psampaio(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1523223 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1520472] CVE-2017-14949 restlet-jse: restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request [fedora-all]
by bugzilla＠redhat.com 04 Dec '17

04 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1520472 Adam Mariš <amaris(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1520471 (CVE-2017-14949) Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1520471 [Bug 1520471] CVE-2017-14949 restlet: XXE vulnerability in XML extension allows remote attackers to access arbitrary files via a crafted REST API HTTP request -- You are receiving this mail because: You are on the CC list for the bug.

1 0

04 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1520472 --- Comment #1 from Adam Mariš <amaris(a)redhat.com> --- Use the following template to for the 'fedpkg update' request to submit an update for this issue as it contains the top-level parent bug(s) as well as this tracking bug. This will ensure that all associated bugs get updated when new packages are pushed to stable. ===== # bugfix, security, enhancement, newpackage (required) type=security # testing, stable request=testing # Bug numbers: 1234,9876 bugs=1520471,1520472 # Description of your update notes=Security fix for [PUT CVEs HERE] # Enable request automation based on the stable/unstable karma thresholds autokarma=True stable_karma=3 unstable_karma=-3 # Automatically close bugs when this marked as stable close_bugs=True # Suggest that users restart after update suggest_reboot=False ====== Additionally, you may opt to use the bodhi web interface to submit updates: https://bodhi.fedoraproject.org/updates/new -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1506612] CVE-2017-15095 jackson-databind: Unsafe deserialization due to incomplete black list ( incomplete fix for CVE-2017-7525)
by bugzilla＠redhat.com 04 Dec '17

04 Dec '17

1 0

[Bug 1465573] CVE-2017-7536 hibernate-validator: Privilege escalation when running under the security manager
by bugzilla＠redhat.com 04 Dec '17

04 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1465573 Bharti Kundal <bkundal(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1520314 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1462702] CVE-2017-7525 jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper
by bugzilla＠redhat.com 04 Dec '17

04 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1462702 Bharti Kundal <bkundal(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1520314 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1410481] CVE-2017-2582 picketlink, keycloak: SAML request parser replaces special strings with system properties
by bugzilla＠redhat.com 04 Dec '17

04 Dec '17

https://bugzilla.redhat.com/show_bug.cgi?id=1410481 Bharti Kundal <bkundal(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1520314 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits December 2017