[Bug 1916633] CVE-2021-20190 jackson-databind: deserialization vulnerability leads to SSRF
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1916633
msiddiqu(a)redhat.com changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |aos-bugs(a)redhat.com,
| |decathorpe(a)gmail.com,
| |java-maint-sig(a)lists.fedora
| |project.org,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |lef(a)fedoraproject.org,
| |puntogil(a)libero.it,
| |rhcs-maint(a)redhat.com,
| |sd-operator-metering@redhat
| |.com
Summary|EMBARGOED CVE-2021-20190 |CVE-2021-20190
|jackson-databind: |jackson-databind:
|deserialization |deserialization
|vulnerability leads to SSRF |vulnerability leads to SSRF
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 3 months
[Bug 1899943] New: F34FailsToInstall: apache-commons-chain
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1899943
Bug ID: 1899943
Summary: F34FailsToInstall: apache-commons-chain
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-commons-chain
Assignee: jjelen(a)redhat.com
Reporter: mhroncok(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
jjelen(a)redhat.com, mmraka(a)redhat.com,
puntogil(a)libero.it
Blocks: 1868279 (F34FailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically. If you feel that
this output has mistakes, please contact me via email (mhroncok(a)redhat.com).
Your package (apache-commons-chain) Fails To Install in Fedora 34:
can't install apache-commons-chain:
- nothing provides mvn(org.jboss.spec.javax.faces:jboss-jsf-api_2.1_spec)
needed by apache-commons-chain-1.2-24.fc33.noarch
If you know about this problem and are planning on fixing it, please
acknowledge so by setting the bug status to ASSIGNED. If you don't have time to
maintain this package, consider orphaning it, so maintainers of dependent
packages realize the problem.
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai...),
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors.
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/rawhide-gating/multi-builds/
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1868279
[Bug 1868279] (F34FailsToInstall) - Fedora 34 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 3 months
[Bug 1767170] New: jna-5.5.0 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1767170
Bug ID: 1767170
Summary: jna-5.5.0 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: jna
Keywords: FutureFeature, Triaged
Assignee: stewardship-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, decathorpe(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 5.5.0
Current version/release in rawhide: 5.4.0-1.fc31
URL: https://github.com/java-native-access/jna/
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/1464/
--
You are receiving this mail because:
You are on the CC list for the bug.
3 years, 3 months