[Bug 1858053] New: metadata-extractor2 fails to build with java-11-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1858053
Bug ID: 1858053
Summary: metadata-extractor2 fails to build with
java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: metadata-extractor2
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cedric.olivier(a)free.fr, decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjelen(a)redhat.com, jvanek(a)redhat.com,
puntogil(a)libero.it, sgehwolf(a)redhat.com
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
metadata-extractor2 fails to build with java-11-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47159493
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone metadata-extractor2; cd metadata-extractor2;
fedpkg build --target f33-java11; #The target is crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1857882] New: apache-commons-configuration fails to build with java-11-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1857882
Bug ID: 1857882
Summary: apache-commons-configuration fails to build with
java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: apache-commons-configuration
Severity: high
Assignee: jjelen(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com, fnasser(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jjelen(a)redhat.com, jvanek(a)redhat.com,
sgehwolf(a)redhat.com, SpikeFedora(a)gmail.com
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
apache-commons-configuration fails to build with java-11-openjdk as sytem JDK.
See https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47146251
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone apache-commons-configuration; cd
apache-commons-configuration; fedpkg build --target f33-java11; #The target is
crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1832624] New: unable to install package
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1832624
Bug ID: 1832624
Summary: unable to install package
Product: Fedora
Version: rawhide
Hardware: x86_64
OS: Linux
Status: NEW
Component: flatpack
Severity: medium
Assignee: extras-orphan(a)fedoraproject.org
Reporter: rmayconsult1337(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Description of problem: I downloaded the Fedora 33 Rawhide for testing and was
able to start the install and halfway it says the flatpack was unable to
install and terminates the entire OS install
Version-Release number of selected component (if applicable): Fedora 33 Rawhide
How reproducible:
Steps to Reproduce:
1. Download the Fedora 33 Rawhide .iso and install
2. Format the hard drive wanting to install the OS
3. Run the Fedora 33 .iso disc to install and have the same results I was
seeing
Actual results: Format my hard drive and reverted to Fedora 32 x64
Expected results: Remove the flatpack file from the .iso image available for
download and see if that fixes the error I'm seeing when I attempt the install.
Additional info:
I've been running the Fedora OS on my machine since Fedora 10 and have never
encountered an install error of the OS that has made me revert to the prior
release with, I was wanting to run Fedora 33 for Testing and see how it was.
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1857888] New: apache-commons-validator fails to build with java-11-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1857888
Bug ID: 1857888
Summary: apache-commons-validator fails to build with
java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: apache-commons-validator
Severity: high
Assignee: SpikeFedora(a)gmail.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, mizdebsk(a)redhat.com,
sgehwolf(a)redhat.com, SpikeFedora(a)gmail.com
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
apache-commons-validator fails to build with java-11-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47147043
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone apache-commons-validator; cd
apache-commons-validator; fedpkg build --target f33-java11; #The target is
crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1857884] New: apache-commons-dbcp fails to build with java-11-openjdk
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1857884
Bug ID: 1857884
Summary: apache-commons-dbcp fails to build with
java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: apache-commons-dbcp
Severity: high
Assignee: SpikeFedora(a)gmail.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, mizdebsk(a)redhat.com,
sgehwolf(a)redhat.com, SpikeFedora(a)gmail.com
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
apache-commons-dbcp fails to build with java-11-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can...
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47146316
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone apache-commons-dbcp; cd apache-commons-dbcp;
fedpkg build --target f33-java11; #The target is crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1833976] New: FTI: hibernate: hibernate-c3p0, hibernate-core, hibernate-ehcache, hibernate-entitymanager, hibernate-hikaricp, hibernate-infinispan, hibernate-proxool, hibernate-testing
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1833976
Bug ID: 1833976
Summary: FTI: hibernate: hibernate-c3p0, hibernate-core,
hibernate-ehcache, hibernate-entitymanager,
hibernate-hikaricp, hibernate-infinispan,
hibernate-proxool, hibernate-testing
Product: Fedora
Version: rawhide
Status: NEW
Component: hibernate
Assignee: extras-orphan(a)fedoraproject.org
Reporter: i.gnatenko.brain(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, odubaj(a)redhat.com,
puntogil(a)libero.it
Blocks: 1750909 (F32FailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically. If you feel that
this output has mistakes, please contact me via email
(ignatenkobrain(a)fedoraproject.org).
Your package (hibernate) Fails To Install in Fedora 32:
can't install hibernate-c3p0:
- nothing provides mvn(com.mchange:c3p0) needed by
hibernate-c3p0-5.0.10-6.fc30.noarch
can't install hibernate-core:
- nothing provides mvn(org.hibernate.common:hibernate-commons-annotations)
needed by hibernate-core-5.0.10-6.fc30.noarch
- nothing provides mvn(com.fasterxml:classmate) needed by
hibernate-core-5.0.10-6.fc30.noarch
- nothing provides
mvn(org.jboss.spec.javax.security.jacc:jboss-jacc-api_1.4_spec) needed by
hibernate-core-5.0.10-6.fc30.noarch
- nothing provides mvn(org.jboss:jandex) needed by
hibernate-core-5.0.10-6.fc30.noarch
can't install hibernate-ehcache:
- nothing provides mvn(net.sf.ehcache:ehcache-core) needed by
hibernate-ehcache-5.0.10-6.fc30.noarch
can't install hibernate-entitymanager:
- nothing provides mvn(org.hibernate.common:hibernate-commons-annotations)
needed by hibernate-entitymanager-5.0.10-6.fc30.noarch
can't install hibernate-hikaricp:
- nothing provides mvn(com.zaxxer:HikariCP) needed by
hibernate-hikaricp-5.0.10-6.fc30.noarch
can't install hibernate-infinispan:
- nothing provides mvn(org.infinispan:infinispan-core) needed by
hibernate-infinispan-5.0.10-6.fc30.noarch
can't install hibernate-proxool:
- nothing provides mvn(proxool:proxool) needed by
hibernate-proxool-5.0.10-6.fc30.noarch
can't install hibernate-testing:
- nothing provides mvn(com.experlog:xapool) needed by
hibernate-testing-5.0.10-6.fc30.noarch
- nothing provides mvn(org.jboss.narayana.jta:jta) needed by
hibernate-testing-5.0.10-6.fc30.noarch
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai...),
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors.
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/rawhide-gating/multi-builds/
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1750909
[Bug 1750909] Fedora 32 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1917234] New: CVE-2021-24122 tomcat: Information disclosure [fedora-all]
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1917234
Bug ID: 1917234
Summary: CVE-2021-24122 tomcat: Information disclosure
[fedora-all]
Product: Fedora
Version: 33
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: csutherl(a)redhat.com
Reporter: slong(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 3 months
[Bug 1908832] New: CVE-2020-26258 XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1908832
Bug ID: 1908832
Summary: CVE-2020-26258 XStream: Server-Side Forgery Request
vulnerability can be activated when unmarshalling
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: abenaiss(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
aos-bugs(a)redhat.com, ataylor(a)redhat.com,
bibryam(a)redhat.com, bmontgom(a)redhat.com,
chazlett(a)redhat.com, dchen(a)redhat.com,
drieden(a)redhat.com, eparis(a)redhat.com,
etirelli(a)redhat.com, ganandan(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gvarsami(a)redhat.com, hbraun(a)redhat.com,
ibek(a)redhat.com, janstey(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jcoleman(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
kaycoth(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lkundrak(a)v3.sk,
mizdebsk(a)redhat.com, mnovotny(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
pantinor(a)redhat.com, pbhattac(a)redhat.com,
pjindal(a)redhat.com, rrajasek(a)redhat.com,
rsynek(a)redhat.com, rwagner(a)redhat.com,
sdaley(a)redhat.com, sponnaga(a)redhat.com,
tcunning(a)redhat.com, tkirby(a)redhat.com,
vbobade(a)redhat.com, vhalbert(a)redhat.com
Target Milestone: ---
Classification: Other
XStream is a Java library to serialize objects to XML and back again. In
XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can
be activated when unmarshalling. The vulnerability may allow a remote attacker
to request data from internal resources that are not publicly available only by
manipulating the processed input stream. If you rely on XStream's default
blacklist of the Security Framework, you will have to use at least version
1.4.15. The reported vulnerability does not exist if running Java 15 or higher.
No user is affected who followed the recommendation to setup XStream's Security
Framework with a whitelist! Anyone relying on XStream's default blacklist can
immediately switch to a whilelist for the allowed types to avoid the
vulnerability. Users of XStream 1.4.14 or below who still want to use XStream
default blacklist can use a workaround described in more detailed in the
referenced advisories.
References:
https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28
https://x-stream.github.io/CVE-2020-26258.html
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 4 months
[Bug 1968566] New: weld-parent-45 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1968566
Bug ID: 1968566
Summary: weld-parent-45 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: weld-parent
Keywords: FutureFeature, Triaged
Assignee: java-maint-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
markku.korkeala(a)kapsi.fi, puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Latest upstream release: 45
Current version/release in rawhide: 44-1.fc34
URL: http://weld.cdi-spec.org
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/20402/
--
You are receiving this mail because:
You are on the CC list for the bug.
2 years, 4 months