[Bug 1935927] EMBARGOED CVE-2021-20289 resteasy: Error message exposes endpoint class information
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1935927
Ted (Jong Seok) Won <jwon(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Group|security, qe_staff |
CC| |alexander.m.scheel(a)gmail.co
| |m, cfu(a)redhat.com,
| |dchen(a)redhat.com,
| |edewata(a)redhat.com,
| |java-sig-commits(a)lists.fedo
| |raproject.org,
| |jmagne(a)redhat.com,
| |mkdineshprasanth(a)gmail.com,
| |peholase(a)redhat.com,
| |puntogil(a)libero.it,
| |rhcs-maint(a)redhat.com,
| |weli(a)redhat.com
Summary|EMBARGOED CVE-2021-20289 |CVE-2021-20289 resteasy:
|resteasy: Error message |Error message exposes
|exposes endpoint class |endpoint class information
|information |
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 11 months
[Bug 1847573] New: Please provide antlr3 version for EPEL8
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1847573
Bug ID: 1847573
Summary: Please provide antlr3 version for EPEL8
Product: Fedora EPEL
Version: epel8
Status: NEW
Component: antlr3
Assignee: dingyichen(a)gmail.com
Reporter: minfrin(a)sharp.fm
QA Contact: extras-qa(a)fedoraproject.org
CC: dingyichen(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
loganjerry(a)gmail.com, mizdebsk(a)redhat.com,
walters(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
Version not available for EPEL8.
Version-Release number of selected component (if applicable):
None.
How reproducible:
Always.
Steps to Reproduce:
1. dnf install antlr3-C-devel
Actual results:
Error: Unable to find a match: antlr3-C-devel
Expected results:
Package installed.
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 11 months
[Bug 1935421] New: http URLs in spec file no longer work, sources in Git, not in lookaside cache
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1935421
Bug ID: 1935421
Summary: http URLs in spec file no longer work, sources in Git,
not in lookaside cache
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-resource-bundles
Severity: medium
Assignee: java-maint-sig(a)lists.fedoraproject.org
Reporter: tim(a)tim-landscheidt.de
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mefoster(a)gmail.com, mizdebsk(a)redhat.com,
sochotni(a)redhat.com
Target Milestone: ---
Classification: Fedora
The spec file refers to http URLs like
http://repo1.maven.org/maven2/org/apache/apache-resource-bundles/ that now
return "501 HTTPS Required". Replacing http with https works fine.
The POM files referred to in Source0, Source2, Source4 and Source6 are tracked
in Git, but apparently have not been uploaded to the lookaside cache:
| [tim@passepartout ~/src/fedora/rpms/apache-resource-bundles]$ rm -f *.pom &&
fedpkg sources && LANGUAGE=en_GB.UTF-8 git status
| On branch rawhide
| Your branch is up to date with 'origin/rawhide'.
| Changes not staged for commit:
| (use "git add/rm <file>..." to update what will be committed)
| (use "git restore <file>..." to discard changes in working directory)
| deleted: apache-incubator-disclaimer-resource-bundle-1.1.pom
| deleted: apache-jar-resource-bundle-1.4.pom
| deleted: apache-license-header-resource-bundle-1.1.pom
| deleted: apache-resource-bundles-2.pom
| no changes added to commit (use "git add" and/or "git commit -a")
| [tim@passepartout ~/src/fedora/rpms/apache-resource-bundles]$
They should be removed in Git, added to .gitignore and uploaded to the
lookaside cache (the content in Git is identical to the upstream sources listed
in the spec file).
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 11 months