[Bug 1294230] New: Please provide support for EPEL7
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1294230
Bug ID: 1294230
Summary: Please provide support for EPEL7
Product: Fedora
Version: rawhide
Component: powermock
Severity: medium
Assignee: rkennke(a)redhat.com
Reporter: projects.rg(a)smart.ms
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, msimacek(a)redhat.com,
neugens(a)redhat.com, projects.rg(a)smart.ms,
rkennke(a)redhat.com
Description of problem:
There are packages for EPEL6 and 5. Please apply it also for EPEL7.
Version-Release number of selected component (if applicable):
-
How reproducible:
yes
Steps to Reproduce:
1. run an EPEL7 system
2. dnf install powermock
3.
Actual results:
no package found.
Expected results:
powermock gets installed with success.
Additional info:
DEBUG util.py:393: Getting requirements for powermock-1.6.2-2.el7.src
DEBUG util.py:393: --> maven-local-3.4.1-11.el7.noarch
DEBUG util.py:393: --> apache-commons-logging-1.1.2-7.el7.noarch
DEBUG util.py:393: --> tomcat-servlet-3.0-api-7.0.54-2.el7_1.noarch
DEBUG util.py:393: --> junit-4.11-8.el7.noarch
DEBUG util.py:393: --> cglib-2.2-18.el7.noarch
DEBUG util.py:393: --> maven-plugin-bundle-2.3.7-12.el7.noarch
DEBUG util.py:393: --> javassist-3.16.1-10.el7.noarch
DEBUG util.py:393: --> mockito-1.9.0-19.el7.noarch
DEBUG util.py:393: --> mockito-1.9.0-19.el7.noarch
DEBUG util.py:393: --> objenesis-1.2-18.el7.noarch
DEBUG util.py:393: --> sonatype-oss-parent-7-6.el7.noarch
DEBUG util.py:393: Error: No Package found for mvn(cglib:cglib-nodep)
DEBUG util.py:393: Error: No Package found for mvn(org.easymock:easymock)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=GemvJMgqTe&a=cc_unsubscribe
6 years, 9 months
[Bug 1457102] New: CVE-2016-3083 hive: Common name attribute of the certificate is not verified
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1457102
Bug ID: 1457102
Summary: CVE-2016-3083 hive: Common name attribute of the
certificate is not verified
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: java-sig-commits(a)lists.fedoraproject.org,
me(a)coolsvap.net, moceap(a)hotmail.com,
pmackinn(a)redhat.com
Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP
connections (it supports both transport modes). While validating the server's
certificate during the connection setup, the client in Apache Hive before 1.2.2
and 2.0.x before 2.0.1 doesn't seem to be verifying the common name attribute
of the certificate. In this way, if a JDBC client sends an SSL request to
server abc.com, and the server responds with a valid certificate (certified by
CA) but issued to xyz.com, the client will accept that as a valid certificate
and the SSL handshake will go through.
Reference:
https://lists.apache.org/thread.html/0851bcf85635385f94cdaa008053802d92b4...
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 10 months
[Bug 1453122] New: Please retire bouncycastle-pkix
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1453122
Bug ID: 1453122
Summary: Please retire bouncycastle-pkix
Product: Fedora
Version: rawhide
Component: bouncycastle-pkix
Assignee: puntogil(a)libero.it
Reporter: mat.booth(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jochen(a)herr-schmitt.de, puntogil(a)libero.it
For simpler maintenance, all bouncycastle modules are now built from a single
source tree in the main bouncycastle package. This has the following benefits:
* Ensures all bouncycastle modules are always the same version and can be
updated simultaneously
* All modules are built and tested using upstream's own build scripts instead
maintaining our own way to build each module
* Only one spec file to maintain instead of several, which is much less work
to update when new bouncycastle is released
Please retire this package in rawhide. Since bouncycastle 1.57 [1], it is no
longer necessary to have a separate bouncycastle-pkix package.
[1] https://koji.fedoraproject.org/koji/buildinfo?buildID=895067
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 10 months
[Bug 1453121] New: Please retire bouncycastle-pg
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1453121
Bug ID: 1453121
Summary: Please retire bouncycastle-pg
Product: Fedora
Version: rawhide
Component: bouncycastle-pg
Assignee: puntogil(a)libero.it
Reporter: mat.booth(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
For simpler maintenance, all bouncycastle modules are now built from a single
source tree in the main bouncycastle package. This has the following benefits:
* Ensures all bouncycastle modules are always the same version and can be
updated simultaneously
* All modules are built and tested using upstream's own build scripts instead
maintaining our own way to build each module
* Only one spec file to maintain instead of several, which is much less work
to update when new bouncycastle is released
Please retire this package in rawhide. Since bouncycastle 1.57 [1], it is no
longer necessary to have a separate bouncycastle-pg package.
[1] https://koji.fedoraproject.org/koji/buildinfo?buildID=895067
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 10 months
[Bug 1377280] New: CVE-2016-5017 zookeeper: Buffer overflow vulnerability in C cli shell
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1377280
Bug ID: 1377280
Summary: CVE-2016-5017 zookeeper: Buffer overflow vulnerability
in C cli shell
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: anemec(a)redhat.com
CC: abhgupta(a)redhat.com, aileenc(a)redhat.com,
alazarot(a)redhat.com, aszczucz(a)redhat.com,
chazlett(a)redhat.com, ctubbsii(a)fedoraproject.org,
dmcphers(a)redhat.com, ethan(a)ethantuttle.com,
etirelli(a)redhat.com, felias(a)redhat.com,
gvarsami(a)redhat.com, hchiorea(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jcoleman(a)redhat.com, jialiu(a)redhat.com,
jokerman(a)redhat.com, jolee(a)redhat.com,
kconner(a)redhat.com, kseifried(a)redhat.com,
kverlaen(a)redhat.com, ldimaggi(a)redhat.com,
lmeyer(a)redhat.com, lpetrovi(a)redhat.com,
mbaluch(a)redhat.com, mmccomas(a)redhat.com,
mwinkler(a)redhat.com, nwallace(a)redhat.com,
pavelp(a)redhat.com, rrajasek(a)redhat.com,
rwagner(a)redhat.com, rzhang(a)redhat.com,
soa-p-jira(a)post-office.corp.redhat.com, s(a)shk.io,
tcunning(a)redhat.com, tiwillia(a)redhat.com,
tkirby(a)redhat.com, tstclair(a)redhat.com,
vhalbert(a)redhat.com
The ZooKeeper C client shells "cli_st" and "cli_mt" have a buffer overflow
vulnerability associated with parsing of the input command when using the
"cmd:<cmd>" batch mode syntax. If the command string exceeds 1024 characters a
buffer overflow will occur. There is no known compromise which takes advantage
of this vulnerability, and if security is enabled the attacker would be limited
by client level security constraints. The C cli shell is intended as a
sample/example of how to use the C client interface, not as a production tool -
the documentation has also been clarified on this point.
References:
http://seclists.org/bugtraq/2016/Sep/29
Upstream fix:
https://git-wip-us.apache.org/repos/asf?p=zookeeper.git;a=commitdiff;h=27...
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 10 months
Broken dependencies: bouncycastle-pg
by buildsys@fedoraproject.org
bouncycastle-pg has broken dependencies in the rawhide tree:
On aarch64:
bouncycastle-pg-1.54-2.fc26.noarch requires mvn(org.bouncycastle:bcprov-jdk15on) = 0:1.54
Please resolve this as soon as possible.
6 years, 10 months