java-sig-commits September 2021

java-sig-commits@lists.fedoraproject.org

1 participants
307 discussions

[Bug 1857010] New: maven-plugin-bundle-5.1.1 is available
by bugzilla＠redhat.com 17 Aug '23

17 Aug '23

https://bugzilla.redhat.com/show_bug.cgi?id=1857010 Bug ID: 1857010 Summary: maven-plugin-bundle-5.1.1 is available Product: Fedora Version: rawhide Status: NEW Component: maven-plugin-bundle Keywords: FutureFeature, Triaged Assignee: stewardship-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, decathorpe(a)gmail.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mhroncok(a)redhat.com, mizdebsk(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 5.1.1 Current version/release in rawhide: 4.2.1-1.fc33 URL: https://felix.apache.org/documentation/subprojects/apache-felix-maven-bundl… Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1922/ -- You are receiving this mail because: You are on the CC list for the bug.

1 14

[Bug 1997772] New: CVE-2021-39144 xstream: vulnerable to a remote command execution attack
by bugzilla＠redhat.com 27 Jun '23

27 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=1997772 Bug ID: 1997772 Summary: CVE-2021-39144 xstream: vulnerable to a remote command execution attack Product: Security Response Hardware: All OS: Linux Status: NEW Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: gsuckevi(a)redhat.com CC: abenaiss(a)redhat.com, aileenc(a)redhat.com, akoufoud(a)redhat.com, alazarot(a)redhat.com, almorale(a)redhat.com, anstephe(a)redhat.com, aos-bugs(a)redhat.com, ataylor(a)redhat.com, bibryam(a)redhat.com, bmontgom(a)redhat.com, chazlett(a)redhat.com, drieden(a)redhat.com, eparis(a)redhat.com, etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org, fedoraproject.org(a)bluhm-de.com, ggaughan(a)redhat.com, gmalinko(a)redhat.com, gvarsami(a)redhat.com, hbraun(a)redhat.com, ibek(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jburrell(a)redhat.com, jcoleman(a)redhat.com, jnethert(a)redhat.com, jochrist(a)redhat.com, jokerman(a)redhat.com, jolee(a)redhat.com, jrokos(a)redhat.com, jross(a)redhat.com, jschatte(a)redhat.com, jstastny(a)redhat.com, jwon(a)redhat.com, kconner(a)redhat.com, krathod(a)redhat.com, kverlaen(a)redhat.com, ldimaggi(a)redhat.com, lkundrak(a)v3.sk, mizdebsk(a)redhat.com, mnovotny(a)redhat.com, nstielau(a)redhat.com, nwallace(a)redhat.com, pantinor(a)redhat.com, pbhattac(a)redhat.com, pdelbell(a)redhat.com, pjindal(a)redhat.com, rrajasek(a)redhat.com, rwagner(a)redhat.com, sponnaga(a)redhat.com, tcunning(a)redhat.com, tkirby(a)redhat.com, tzimanyi(a)redhat.com Target Milestone: --- Classification: Other XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose. References: https://github.com/x-stream/xstream/security/advisories/GHSA-j9h8-phrw-h4fh https://x-stream.github.io/CVE-2021-39144.html -- You are receiving this mail because: You are on the CC list for the bug.

1 27

[Bug 1887211] New: junit-4.13.1 is available
by bugzilla＠redhat.com 15 Jun '23

15 Jun '23

https://bugzilla.redhat.com/show_bug.cgi?id=1887211 Bug ID: 1887211 Summary: junit-4.13.1 is available Product: Fedora Version: rawhide Status: NEW Component: junit Keywords: FutureFeature, Triaged Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dbhole(a)redhat.com, decathorpe(a)gmail.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 4.13.1 Current version/release in rawhide: 4.13-2.fc34 URL: https://github.com/junit-team/junit4 Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1480/ -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1988896] New: weird build error with xmvn-mojo:4.0.0:javadoc (default-cli) @ log4j
by bugzilla＠redhat.com 25 May '23

25 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=1988896 Bug ID: 1988896 Summary: weird build error with xmvn-mojo:4.0.0:javadoc (default-cli) @ log4j Product: Fedora Version: rawhide Status: NEW Component: xmvn Assignee: mizdebsk(a)redhat.com Reporter: sergio(a)serjux.com QA Contact: extras-qa(a)fedoraproject.org CC: java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mat.booth(a)gmail.com, mizdebsk(a)redhat.com, msrb(a)redhat.com Target Milestone: --- Classification: Fedora Created attachment 1809992 --> https://bugzilla.redhat.com/attachment.cgi?id=1809992&action=edit https://kojipkgs.fedoraproject.org//work/tasks/9723/73109723/build.log Description of problem: I can build log4j on F34 but not on Rawhide xmvn-mojo:3.1.0:javadoc (default-cli) @ log4j --- in build.log and xmvn-mojo:4.0.0:javadoc (default-cli) @ log4j --- /builddir/build/BUILD/apache-log4j-2.14.1-src/log4j-slf4j-impl/src/main/java/org/apache/logging/slf4j/package-info.java:22: warning: a package-info.java file has already been seen for package org.apache.logging.slf4j package org.apache.logging.slf4j; ^ /builddir/build/BUILD/apache-log4j-2.14.1-src/log4j-to-slf4j/src/main/java/org/apache/logging/slf4j/SLF4JLogger.java:25: error: cannot find symbol import org.slf4j.MarkerFactory; take a look in the build.log -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1736921] New: truth: FTBFS in Fedora rawhide/f31
by bugzilla＠redhat.com 24 May '23

24 May '23

https://bugzilla.redhat.com/show_bug.cgi?id=1736921 Bug ID: 1736921 Summary: truth: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: truth Assignee: noa(a)resare.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, noa(a)resare.com Blocks: 1732841 Target Milestone: --- Classification: Fedora truth failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36637892 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix truth at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, truth will be orphaned. Before branching of Fedora 32, truth will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1819818] New: Please package fop for epel-8
by bugzilla＠redhat.com 23 Mar '23

23 Mar '23

https://bugzilla.redhat.com/show_bug.cgi?id=1819818 Bug ID: 1819818 Summary: Please package fop for epel-8 Product: Fedora EPEL Version: epel8 Hardware: All OS: Linux Status: NEW Component: fop Severity: medium Assignee: rlandman(a)redhat.com Reporter: TicoTimo(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: c.david86(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, rhbugs(a)n-dimensional.de, rlandman(a)redhat.com, tim(a)tim-landscheidt.de Target Milestone: --- Classification: Fedora fop was available in CentOS-7: http://mirror.centos.org/centos/7/os/x86_64/Packages/fop-1.1-6.el7.noarch.r… It is still available Fedora. This is the one package missing from claiming full support for CentOS-8 for Yocto Project (documentation build depends on fop). NOTE: I am willing to work on this as a co-maintainer. fas: ttorling ------------- Naively cloning f30 branch and performing a local build (on CentOS-8) (fop-2.2): ant is available as module error: Failed build dependencies: apache-commons, avalon-framework, batik, fontbox, javapackages-local, junit, qdox, servlet, xmlgraphics-commons, xmlunit Similar for f32 branch (fop-2.4). error: Failed build dependencies: apache-commons-io apache-commons-logging batik fontbox javapackages-local junit qdox servlet xmlgraphics-commons xmlunit -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1807472] New: jflex-1.8.0 is available
by bugzilla＠redhat.com 10 Mar '23

10 Mar '23

https://bugzilla.redhat.com/show_bug.cgi?id=1807472 Bug ID: 1807472 Summary: jflex-1.8.0 is available Product: Fedora Version: rawhide Status: NEW Component: jflex Keywords: FutureFeature, Triaged Assignee: stewardship-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, decathorpe(a)gmail.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 1.8.0 Current version/release in rawhide: 1.7.0-2.fc32 URL: http://jflex.de/download.html Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1449/ -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1691424] New: maven-scm-1.11.2 is available
by bugzilla＠redhat.com 10 Feb '23

10 Feb '23

https://bugzilla.redhat.com/show_bug.cgi?id=1691424 Bug ID: 1691424 Summary: maven-scm-1.11.2 is available Product: Fedora Version: rawhide Status: NEW Component: maven-scm Keywords: FutureFeature, Triaged Assignee: guido.grazioli(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: akurtako(a)redhat.com, dbhole(a)redhat.com, guido.grazioli(a)gmail.com, jaromir.capik(a)email.cz, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 1.11.2 Current version/release in rawhide: 1.10.0-4.fc30 URL: http://repo2.maven.org/maven2/org/apache/maven/scm/maven-scm/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1934/ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1818177] New: xmlstreambuffer-2.0.0-M1 is available
by bugzilla＠redhat.com 16 Jan '23

16 Jan '23

https://bugzilla.redhat.com/show_bug.cgi?id=1818177 Bug ID: 1818177 Summary: xmlstreambuffer-2.0.0-M1 is available Product: Fedora Version: rawhide Status: NEW Component: xmlstreambuffer Keywords: FutureFeature, Triaged Assignee: decathorpe(a)gmail.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: decathorpe(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, puntogil(a)libero.it, stewardship-sig(a)lists.fedoraproject.org Target Milestone: --- Classification: Fedora Latest upstream release: 2.0.0-M1 Current version/release in rawhide: 1.5.4-11.fc32 URL: https://javaee.github.io/metro-xmlstreambuffer/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/89340/ -- You are receiving this mail because: You are on the CC list for the bug.

1 15

[Bug 1964677] New: fasterxml-oss-parent-42 is available
by bugzilla＠redhat.com 16 Dec '22

16 Dec '22

https://bugzilla.redhat.com/show_bug.cgi?id=1964677 Bug ID: 1964677 Summary: fasterxml-oss-parent-42 is available Product: Fedora Version: rawhide Status: NEW Component: fasterxml-oss-parent Keywords: FutureFeature, Triaged Assignee: java-maint-sig(a)lists.fedoraproject.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: cfu(a)redhat.com, ckelley(a)redhat.com, edewata(a)redhat.com, java-maint-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jmagne(a)redhat.com, mharmsen(a)redhat.com, puntogil(a)libero.it, roman(a)fenkhuber.at Target Milestone: --- Classification: Fedora Latest upstream release: 42 Current version/release in rawhide: 41-2.fc34 URL: https://github.com/FasterXML/oss-parent Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/114915/ -- You are receiving this mail because: You are on the CC list for the bug.

1 12

← Newer
1
2
3
4
5
6
7
...
31
Older →

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits September 2021