[Bug 1747066] New: apache-commons-compress-1.19 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1747066
Bug ID: 1747066
Summary: apache-commons-compress-1.19 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-commons-compress
Keywords: FutureFeature, Triaged
Assignee: stewardship-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jjelen(a)redhat.com, mizdebsk(a)redhat.com,
mkoncek(a)redhat.com, SpikeFedora(a)gmail.com,
stewardship-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 1.19
Current version/release in rawhide: 1.18-6.fc32
URL: http://commons.apache.org/proper/commons-compress/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/62/
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1742722] New: apache-commons-beanutils-1.9.4 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1742722
Bug ID: 1742722
Summary: apache-commons-beanutils-1.9.4 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-commons-beanutils
Keywords: FutureFeature, Triaged
Assignee: stewardship-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com, fnasser(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
mhroncok(a)redhat.com, mizdebsk(a)redhat.com,
SpikeFedora(a)gmail.com,
stewardship-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 1.9.4
Current version/release in rawhide: 1.9.3-7.fc31
URL: http://www.apache.org/dist/commons/beanutils/source/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/58/
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1339318
--- Comment #12 from Chess Hazlett <chazlett(a)redhat.com> ---
Statement:
Red Hat JBoss A-MQ 6.3 , Red Hat JBoss Fuse 6.3, and Red Hat JBoss Fuse Service
Works 6.0.0 do not provide the vulnerable component and are not affected by
this flaw. Red Hat JBoss A-MQ 6.2.1 and Red Hat JBoss Fuse 6.2.1 disable the
vulnerable component and as such are not vulnerable to this flaw. The
fileserver component was first disabled in A-MQ 6.2.0 and Fuse 6.2.0. Users of
older, unsupported versions of these products are strongly advised to observe
the mitigation provided on this page.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1339318
--- Comment #11 from Chess Hazlett <chazlett(a)redhat.com> ---
Statement:
Red Hat JBoss A-MQ 6.3 , Red Hat JBoss Fuse 6.3, and Red Hat JBoss Fuse Service
Works 6.0.0 do not provide the vulnerable component and are not affected by
this flaw. Red Hat JBoss A-MQ 6.2.1 and Red Hat JBoss Fuse 6.2.1 disable the
vulnerable component and are not affected by this flaw. The fileserver
component was first disabled in A-MQ 6.2.0 and Fuse 6.2.0. Users of older,
unsupported versions of these products are strongly advised to observe the
mitigation provided on this page.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1751227] CVE-2019-14838 wildfly-core: Incorrect privileges for 'Monitor', 'Auditor' and 'Deployer' user by default
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1751227
Paramvir jindal <pjindal(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |atangrin(a)redhat.com,
| |extras-orphan@fedoraproject
| |.org,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jboss-set(a)redhat.com,
| |lef(a)fedoraproject.org,
| |puntogil(a)libero.it
Summary|EMBARGOED CVE-2019-14838 |CVE-2019-14838
|wildfly-core: Incorrect |wildfly-core: Incorrect
|privileges for 'Monitor', |privileges for 'Monitor',
|'Auditor' and 'Deployer' |'Auditor' and 'Deployer'
|user by default |user by default
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1339318] CVE-2016-3088 activemq: Fileserver web application vulnerability allowing RCE
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1339318
--- Comment #9 from Chess Hazlett <chazlett(a)redhat.com> ---
Statement:
Red Hat JBoss A-MQ 6.3 and Red Hat JBoss Fuse 6.3 do not provide the vulnerable
component and are not affected by this flaw. Red Hat JBoss A-MQ 6.2.1 and Red
Hat JBoss Fuse 6.2.1 disable the vulnerable component and are not affected by
this flaw. The fileserver component was first disabled in A-MQ 6.2.0 and Fuse
6.2.0. Users of older, unsupported versions of these products are strongly
advised to observe the mitigation provided on this page.
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months
[Bug 1708360] New: apache-commons-cli isn't installable
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1708360
Bug ID: 1708360
Summary: apache-commons-cli isn't installable
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-commons-cli
Assignee: SpikeFedora(a)gmail.com
Reporter: ascheel(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, SpikeFedora(a)gmail.com
Target Milestone: ---
Classification: Fedora
Description of problem:
The following fails on Fedora Rawhide (F31):
# dnf install apache-commons-cli
Last metadata expiration check: 0:39:52 ago on Thu 09 May 2019 04:31:46 PM UTC.
No match for argument: apache-commons-cli
Error: Unable to find a match
This breaks pki-ca:
Error:
Problem: package pki-server-10.7.0-1.fc31.noarch requires pki-tools = 10.7.0,
but none of the providers can be installed
- package pki-tools-10.7.0-1.fc31.x86_64 requires pki-base-java = 10.7.0, but
none of the providers can be installed
- package pki-ca-10.7.0-1.fc31.noarch requires pki-server = 10.7.0, but none
of the providers can be installed
- package pki-base-java-10.7.0-1.fc31.noarch requires apache-commons-cli, but
none of the providers can be installed
- conflicting requests
- package apache-commons-cli-1.4-6.fc30.noarch is excluded
(try to add '--skip-broken' to skip uninstallable packages)
Please rebuild apache-commons-cli for F30 and F31. Note that this package is
maintained as an ursine package as per here:
https://src.fedoraproject.org/rpms/apache-commons-cli/tree/master
--
You are receiving this mail because:
You are on the CC list for the bug.
4 years, 6 months