https://bugzilla.redhat.com/show_bug.cgi?id=1857884
Bug ID: 1857884
Summary: apache-commons-dbcp fails to build with
java-11-openjdk
Product: Fedora
Version: rawhide
Hardware: All
OS: All
Status: NEW
Component: apache-commons-dbcp
Severity: high
Assignee: SpikeFedora(a)gmail.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, mizdebsk(a)redhat.com,
sgehwolf(a)redhat.com, SpikeFedora(a)gmail.com
Blocks: 1825969 (Java11)
Target Milestone: ---
Classification: Fedora
apache-commons-dbcp fails to build with java-11-openjdk as sytem JDK. See
https://fedoraproject.org/wiki/Changes/Java11 .
See especially part about known failures:
https://fedoraproject.org/wiki/Changes/Java11#common_issues_packagers_can_f…
For the build logs, see:
https://koji.fedoraproject.org/koji/taskinfo?taskID=47146316
We run the rebuild longer then 10days ago. Log may be gone. Also your package
may be passing in regular rawhide.
To reproduce, simply: fedpkg clone apache-commons-dbcp; cd apache-commons-dbcp;
fedpkg build --target f33-java11; #The target is crucial.
We run two reruns your package failed both.
We had tried 650 packages, and 500 had passed, so the java-11-openjdk will be
system JDK in f33, and you should fix your package if you want to keep it
alive. Usually the fix is simple, and best is to update the package to latest
upstream version.
There will be usual mass rebuild once f33 branches. You may got another FTBFS
bug.
Let us know here if you have any questions, here in bug, or at
java-devel(a)lists.fedoraproject.org .
We'd appreciate help from the people who know this package best, but if you
don't want to work on this now, let us know so we can try to work around it on
our side if needed.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1825969
[Bug 1825969] java-11-openjdk as system JDK in F33
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1833976
Bug ID: 1833976
Summary: FTI: hibernate: hibernate-c3p0, hibernate-core,
hibernate-ehcache, hibernate-entitymanager,
hibernate-hikaricp, hibernate-infinispan,
hibernate-proxool, hibernate-testing
Product: Fedora
Version: rawhide
Status: NEW
Component: hibernate
Assignee: extras-orphan(a)fedoraproject.org
Reporter: i.gnatenko.brain(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: extras-orphan(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
lef(a)fedoraproject.org, odubaj(a)redhat.com,
puntogil(a)libero.it
Blocks: 1750909 (F32FailsToInstall)
Target Milestone: ---
Classification: Fedora
Hello,
Please note that this comment was generated automatically. If you feel that
this output has mistakes, please contact me via email
(ignatenkobrain(a)fedoraproject.org)
Your package (hibernate) Fails To Install in Fedora 32:
can't install hibernate-c3p0:
- nothing provides mvn(com.mchange:c3p0) needed by
hibernate-c3p0-5.0.10-6.fc30.noarch
can't install hibernate-core:
- nothing provides mvn(org.hibernate.common:hibernate-commons-annotations)
needed by hibernate-core-5.0.10-6.fc30.noarch
- nothing provides mvn(com.fasterxml:classmate) needed by
hibernate-core-5.0.10-6.fc30.noarch
- nothing provides
mvn(org.jboss.spec.javax.security.jacc:jboss-jacc-api_1.4_spec) needed by
hibernate-core-5.0.10-6.fc30.noarch
- nothing provides mvn(org.jboss:jandex) needed by
hibernate-core-5.0.10-6.fc30.noarch
can't install hibernate-ehcache:
- nothing provides mvn(net.sf.ehcache:ehcache-core) needed by
hibernate-ehcache-5.0.10-6.fc30.noarch
can't install hibernate-entitymanager:
- nothing provides mvn(org.hibernate.common:hibernate-commons-annotations)
needed by hibernate-entitymanager-5.0.10-6.fc30.noarch
can't install hibernate-hikaricp:
- nothing provides mvn(com.zaxxer:HikariCP) needed by
hibernate-hikaricp-5.0.10-6.fc30.noarch
can't install hibernate-infinispan:
- nothing provides mvn(org.infinispan:infinispan-core) needed by
hibernate-infinispan-5.0.10-6.fc30.noarch
can't install hibernate-proxool:
- nothing provides mvn(proxool:proxool) needed by
hibernate-proxool-5.0.10-6.fc30.noarch
can't install hibernate-testing:
- nothing provides mvn(com.experlog:xapool) needed by
hibernate-testing-5.0.10-6.fc30.noarch
- nothing provides mvn(org.jboss.narayana.jta:jta) needed by
hibernate-testing-5.0.10-6.fc30.noarch
If you don't react accordingly to the policy for FTBFS/FTI bugs
(https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…)
your package may be orphaned in 8+ weeks.
P.S. The data was generated solely from koji buildroot, so it might be newer
than the latest compose or the content on mirrors.
P.P.S. If this bug has been reported in the middle of upgrading multiple
dependent packages, please consider using side tags:
https://docs.fedoraproject.org/en-US/rawhide-gating/multi-builds/
Thanks!
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1750909
[Bug 1750909] Fedora 32 Fails To install Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1917234
Bug ID: 1917234
Summary: CVE-2021-24122 tomcat: Information disclosure
[fedora-all]
Product: Fedora
Version: 33
Status: NEW
Component: tomcat
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: csutherl(a)redhat.com
Reporter: slong(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: alee(a)redhat.com, coolsvap(a)gmail.com,
csutherl(a)redhat.com, huwang(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com
Target Milestone: ---
Classification: Fedora
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While only
one tracking bug has been filed, please correct all affected versions at
the same time. If you need to fix the versions independent of each other,
you may clone this bug as appropriate.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1908832
Bug ID: 1908832
Summary: CVE-2020-26258 XStream: Server-Side Forgery Request
vulnerability can be activated when unmarshalling
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: abenaiss(a)redhat.com, aileenc(a)redhat.com,
akoufoud(a)redhat.com, alazarot(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
aos-bugs(a)redhat.com, ataylor(a)redhat.com,
bibryam(a)redhat.com, bmontgom(a)redhat.com,
chazlett(a)redhat.com, dchen(a)redhat.com,
drieden(a)redhat.com, eparis(a)redhat.com,
etirelli(a)redhat.com, ganandan(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gvarsami(a)redhat.com, hbraun(a)redhat.com,
ibek(a)redhat.com, janstey(a)redhat.com,
java-maint(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jcoleman(a)redhat.com,
jochrist(a)redhat.com, jokerman(a)redhat.com,
jolee(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
kaycoth(a)redhat.com, kconner(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
ldimaggi(a)redhat.com, lkundrak(a)v3.sk,
mizdebsk(a)redhat.com, mnovotny(a)redhat.com,
nstielau(a)redhat.com, nwallace(a)redhat.com,
pantinor(a)redhat.com, pbhattac(a)redhat.com,
pjindal(a)redhat.com, rrajasek(a)redhat.com,
rsynek(a)redhat.com, rwagner(a)redhat.com,
sdaley(a)redhat.com, sponnaga(a)redhat.com,
tcunning(a)redhat.com, tkirby(a)redhat.com,
vbobade(a)redhat.com, vhalbert(a)redhat.com
Target Milestone: ---
Classification: Other
XStream is a Java library to serialize objects to XML and back again. In
XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can
be activated when unmarshalling. The vulnerability may allow a remote attacker
to request data from internal resources that are not publicly available only by
manipulating the processed input stream. If you rely on XStream's default
blacklist of the Security Framework, you will have to use at least version
1.4.15. The reported vulnerability does not exist if running Java 15 or higher.
No user is affected who followed the recommendation to setup XStream's Security
Framework with a whitelist! Anyone relying on XStream's default blacklist can
immediately switch to a whilelist for the allowed types to avoid the
vulnerability. Users of XStream 1.4.14 or below who still want to use XStream
default blacklist can use a workaround described in more detailed in the
referenced advisories.
References:
https://github.com/x-stream/xstream/security/advisories/GHSA-4cch-wxpw-8p28https://x-stream.github.io/CVE-2020-26258.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1968566
Bug ID: 1968566
Summary: weld-parent-45 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: weld-parent
Keywords: FutureFeature, Triaged
Assignee: java-maint-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
markku.korkeala(a)kapsi.fi, puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Latest upstream release: 45
Current version/release in rawhide: 44-1.fc34
URL: http://weld.cdi-spec.org
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/20402/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1851651
Bug ID: 1851651
Summary: nasm-2.15 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: nasm
Keywords: FutureFeature, Triaged
Assignee: igor.raits(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net, igor.raits(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, pbonzini(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 2.15
Current version/release in rawhide: 2.14.02-3.fc32
URL: http://www.nasm.us/pub/nasm/releasebuilds/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/2048/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1987728
Bug ID: 1987728
Summary: nasm: FTBFS in Fedora rawhide/f35
Product: Fedora
Version: rawhide
Status: NEW
Component: nasm
Assignee: igor.raits(a)gmail.com
Reporter: releng(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dominik(a)greysector.net, igor.raits(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, pbonzini(a)redhat.com
Blocks: 1927309 (F35FTBFS,RAWHIDEFTBFS)
Target Milestone: ---
Classification: Fedora
nasm failed to build from source in Fedora rawhide/f35
https://koji.fedoraproject.org/koji/taskinfo?taskID=72412306
For details on the mass rebuild see:
https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
Please fix nasm at your earliest convenience and set the bug's status to
ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks,
nasm will be orphaned. Before branching of Fedora 36,
nasm will be retired, if it still fails to build.
For more details on the FTBFS policy, please visit:
https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails…
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1927309
[Bug 1927309] Fedora 35 FTBFS Tracker
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1785554
Bug ID: 1785554
Summary: testng-7.1.1 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: testng
Keywords: FutureFeature, Triaged
Assignee: decathorpe(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: decathorpe(a)gmail.com, jaromir.capik(a)email.cz,
java-sig-commits(a)lists.fedoraproject.org,
lkundrak(a)v3.sk, mizdebsk(a)redhat.com,
stewardship-sig(a)lists.fedoraproject.org
Target Milestone: ---
Classification: Fedora
Latest upstream release: 7.1.1
Current version/release in rawhide: 6.14.3-9.fc31
URL: https://github.com/cbeust/testng
Please consult the package updates policy before you issue an update to a
stable branch: https://fedoraproject.org/wiki/Updates_Policy
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/4956/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=1926524
Bug ID: 1926524
Summary: jna-5.7.0 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: jna
Keywords: FutureFeature, Triaged
Assignee: java-maint-sig(a)lists.fedoraproject.org
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, decathorpe(a)gmail.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 5.7.0
Current version/release in rawhide: 5.6.0-2.fc34
URL: https://github.com/java-native-access/jna/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/1464/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2009440
Bug ID: 2009440
Summary: icu4j-70-rc is available
Product: Fedora
Version: rawhide
Status: NEW
Component: icu4j
Keywords: FutureFeature, Triaged
Assignee: loganjerry(a)gmail.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, fnasser(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
krzysztof.daniel(a)gmail.com, lef(a)fedoraproject.org,
loganjerry(a)gmail.com, mizdebsk(a)redhat.com,
nsantos(a)redhat.com
Target Milestone: ---
Classification: Fedora
Latest upstream release: 70-rc
Current version/release in rawhide: 69.1-1.fc36
URL: http://site.icu-project.org/
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from anitya:
https://release-monitoring.org/project/234727/
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2009440