java-sig-commits September 2021

java-sig-commits@lists.fedoraproject.org

1 participants
307 discussions

[Bug 1972764] New: lucene-8.9.0 is available
by bugzilla＠redhat.com 22 Sep '21

22 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1972764 Bug ID: 1972764 Summary: lucene-8.9.0 is available Product: Fedora Version: rawhide Status: NEW Component: lucene Keywords: FutureFeature, Triaged Assignee: akurtako(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dbhole(a)redhat.com, dchen(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, krzysztof.daniel(a)gmail.com, lef(a)fedoraproject.org, rgrunber(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 8.9.0 Current version/release in rawhide: 8.8.2-1.fc35 URL: http://lucene.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/7178/ -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1879042] CVE-2020-25633 resteasy-client: potential sensitive information leakage in JAX-RS RESTEasy Client's WebApplicationException handling
by bugzilla＠redhat.com 20 Sep '21

20 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1879042 --- Comment #25 from Jonathan Christison <jochrist(a)redhat.com> --- Marking Red Hat Integration Service Registry as having a low impact, this is because although the vulnerable version of resteasy-client is shipped and used, its use in Service Registry is not susceptible to the vulnerability, this is because its use in the maven plugin it does not communicate with further upstream/backend services from a service context, that is to say the Service Registry service itself does not use the resteasy-client to call onto other services, this is a precondition of the vulnerability. -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=1879042

1 0

[Bug 2003572] New: F36FailsToInstall: aalto-xml
by bugzilla＠redhat.com 13 Sep '21

13 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=2003572 Bug ID: 2003572 Summary: F36FailsToInstall: aalto-xml Product: Fedora Version: rawhide Status: NEW Component: aalto-xml Assignee: jvanek(a)redhat.com Reporter: mhroncok(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jvanek(a)redhat.com, puntogil(a)libero.it Blocks: 1992487 (F36FailsToInstall,RAWHIDEFailsToInstall) Target Milestone: --- Classification: Fedora Hello, Please note that this comment was generated automatically. If you feel that this output has mistakes, please contact me via email (mhroncok(a)redhat.com) Your package (aalto-xml) Fails To Install in Fedora 36: can't install aalto-xml: - nothing provides mvn(org.codehaus.woodstox:stax2-api) needed by aalto-xml-1.2.2-6.fc35.noarch If you know about this problem and are planning on fixing it, please acknowledge so by setting the bug status to ASSIGNED. If you don't have time to maintain this package, consider orphaning it, so maintainers of dependent packages realize the problem. If you don't react accordingly to the policy for FTBFS/FTI bugs (https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…) your package may be orphaned in 8+ weeks. P.S. The data was generated solely from koji buildroot, so it might be newer than the latest compose or the content on mirrors. P.P.S. If this bug has been reported in the middle of upgrading multiple dependent packages, please consider using side tags: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/#updating-inter-d… Thanks! Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1992487 [Bug 1992487] Fedora 36 Fails To install Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2003572

1 1

[Bug 1353904] CVE-2016-5007 springframework: spring: Path matching inconsistency [fedora-all]
by bugzilla＠redhat.com 05 Sep '21

05 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1353904 Didik Supriadi <didiksupriadi41(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2001342 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2001342 [Bug 2001342] Review Request: reactive-streams - Reactive Streams Specification for the JVM -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1353905] CVE-2016-5007 springframework-security: spring: Path matching inconsistency [fedora-all]
by bugzilla＠redhat.com 05 Sep '21

05 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1353905 Didik Supriadi <didiksupriadi41(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |2001342 Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2001342 [Bug 2001342] Review Request: reactive-streams - Reactive Streams Specification for the JVM -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1990025] New: Provide apache-commons-digester for EPEL-8
by bugzilla＠redhat.com 02 Sep '21

02 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1990025 Bug ID: 1990025 Summary: Provide apache-commons-digester for EPEL-8 Product: Fedora Version: rawhide OS: Windows Status: NEW Component: apache-commons-digester Assignee: mat.booth(a)gmail.com Reporter: redhat.com(a)bluhm-de.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mat.booth(a)gmail.com, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Currently, there is no apache-commons-digester version shipped in EPEL-8 (or RHEL Base/Appstream). Can you please release an apache-commons-digester package to EPEL-8? Thank you. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1948001] CVE-2021-3536 wildfly: XSS via admin console when creating roles in domain mode
by bugzilla＠redhat.com 01 Sep '21

01 Sep '21

https://bugzilla.redhat.com/show_bug.cgi?id=1948001 --- Comment #21 from Jonathan Christison <jochrist(a)redhat.com> --- Marking Red Hat Integration Camel-K, Camel-Quarkus and Service Registry as not affected, this is because none of these products consume the affected org.jboss.hal:hal-ballroom component. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits September 2021