[Bug 2064608] New: Please provide maven-parent for EPEL-9
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064608
Bug ID: 2064608
Summary: Please provide maven-parent for EPEL-9
Product: Fedora
Version: rawhide
Status: NEW
Component: maven-parent
Assignee: mizdebsk(a)redhat.com
Reporter: fedoraproject.org(a)bluhm-de.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Can you please provide maven-parent for EPEL-9?
This one is a bit tricky as there is a circular dependency via apache-parent
and apache-resource-bundles back to maven-parent.
I would be grateful for your efforts!
Thank you and best wishes,
Stefan
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064608
1 year
[Bug 2064612] New: Please provide apache-resource-bundles for EPEL-9
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064612
Bug ID: 2064612
Summary: Please provide apache-resource-bundles for EPEL-9
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-resource-bundles
Assignee: mizdebsk(a)redhat.com
Reporter: fedoraproject.org(a)bluhm-de.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mefoster(a)gmail.com, mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Can you please provide apache-resource-bundles for EPEL-9?
This one is a bit tricky as there is a circular dependency via maven-parent and
apache-parent back to apache-resource-bundles.
I would be grateful for your efforts!
Thank you and best wishes,
Stefan
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064612
1 year
[Bug 2064611] New: Please provide apache-parent for EPEL-9
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064611
Bug ID: 2064611
Summary: Please provide apache-parent for EPEL-9
Product: Fedora
Version: rawhide
Status: NEW
Component: apache-parent
Assignee: mizdebsk(a)redhat.com
Reporter: fedoraproject.org(a)bluhm-de.com
QA Contact: extras-qa(a)fedoraproject.org
CC: agrimm(a)gmail.com, ctubbsii(a)fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Can you please provide apache-parent for EPEL-9?
This one is a bit tricky as there is a circular dependency via
apache-resource-bundles and maven-parent back to apache-parent.
I would be grateful for your efforts!
Thank you and best wishes,
Stefan
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064611
1 year
[Bug 2064597] New: Please provide plexus-pom for EPEL-9
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2064597
Bug ID: 2064597
Summary: Please provide plexus-pom for EPEL-9
Product: Fedora
Version: rawhide
Status: NEW
Component: plexus-pom
Assignee: mizdebsk(a)redhat.com
Reporter: fedoraproject.org(a)bluhm-de.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, puntogil(a)libero.it
Target Milestone: ---
Classification: Fedora
Can you please provide plexus-pom for EPEL-9?
The rawhide state seems to build already:
$ fedpkg scratch-build --target epel9
Building plexus-pom-7-5.fc37 for epel9
Created task: 84266808
Task info: https://koji.fedoraproject.org/koji/taskinfo?taskID=84266808
Watching tasks (this may be safely interrupted)...
84266808 build (epel9,
/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): free
84266808 build (epel9,
/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): free -> open
(buildvm-s390x-20.s390.fedoraproject.org)
84266831 buildSRPMFromSCM
(/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): free
84266831 buildSRPMFromSCM
(/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): free -> open
(buildvm-x86-23.iad2.fedoraproject.org)
84266924 buildArch (plexus-pom-7-5.el9.src.rpm, noarch): free
84266831 buildSRPMFromSCM
(/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): open
(buildvm-x86-23.iad2.fedoraproject.org) -> closed
1 free 1 open 1 done 0 failed
84266924 buildArch (plexus-pom-7-5.el9.src.rpm, noarch): free -> open
(buildhw-x86-01.iad2.fedoraproject.org)
84266808 build (epel9,
/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69): open
(buildvm-s390x-20.s390.fedoraproject.org) -> closed
0 free 1 open 2 done 0 failed
84266924 buildArch (plexus-pom-7-5.el9.src.rpm, noarch): open
(buildhw-x86-01.iad2.fedoraproject.org) -> closed
0 free 0 open 3 done 0 failed
84266808 build (epel9,
/rpms/plexus-pom.git:853f396f7ad43fe8c3a61c8c46a93c0575740d69) completed
successfully
Thank you and best wishes,
Stefan
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2064597
1 year
[Bug 2055480] New: CVE-2021-22060 springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096)
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2055480
Bug ID: 2055480
Summary: CVE-2021-22060 springframework: Additional Log
Injection in Spring Framework (follow-up to
CVE-2021-22096)
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: jwon(a)redhat.com
CC: aboyko(a)redhat.com, ahenning(a)redhat.com,
aileenc(a)redhat.com, alazarot(a)redhat.com,
anstephe(a)redhat.com, chazlett(a)redhat.com,
dchen(a)redhat.com, drieden(a)redhat.com,
emingora(a)redhat.com, etirelli(a)redhat.com,
extras-orphan(a)fedoraproject.org, ggaughan(a)redhat.com,
gmalinko(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jochrist(a)redhat.com, jolee(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
lsurette(a)redhat.com, michal.skrivanek(a)redhat.com,
mnovotny(a)redhat.com, mperina(a)redhat.com,
pdelbell(a)redhat.com, pjindal(a)redhat.com,
pskopek(a)redhat.com, puntogil(a)libero.it,
rguimara(a)redhat.com, rrajasek(a)redhat.com,
sbonazzo(a)redhat.com, sguilhen(a)redhat.com,
tzimanyi(a)redhat.com
Blocks: 2044407
Target Milestone: ---
Classification: Other
In Spring Framework versions 5.3.0 - 5.3.13, 5.2.0 - 5.2.18, and older
unsupported versions, it is possible for a user to provide malicious input to
cause the insertion of additional log entries. This is a follow-up to
CVE-2021-22096 that protects against additional types of input and in more
places of the Spring Framework codebase.
https://nvd.nist.gov/vuln/detail/CVE-2021-22060
https://tanzu.vmware.com/security/cve-2021-22060
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2055480
1 year
[Bug 2034584] New: CVE-2021-22096 springframework: malicious input leads to insertion of additional log entries
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2034584
Bug ID: 2034584
Summary: CVE-2021-22096 springframework: malicious input leads
to insertion of additional log entries
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: darunesh(a)redhat.com
CC: aboyko(a)redhat.com, ahenning(a)redhat.com,
aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, almorale(a)redhat.com,
anstephe(a)redhat.com, chazlett(a)redhat.com,
dchen(a)redhat.com, drieden(a)redhat.com,
etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
hvyas(a)redhat.com, ibek(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jochrist(a)redhat.com, jolee(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
lef(a)fedoraproject.org, lsurette(a)redhat.com,
michal.skrivanek(a)redhat.com, mnovotny(a)redhat.com,
mperina(a)redhat.com, pdelbell(a)redhat.com,
pjindal(a)redhat.com, pskopek(a)redhat.com,
puntogil(a)libero.it, rrajasek(a)redhat.com,
sbonazzo(a)redhat.com, sguilhen(a)redhat.com,
tzimanyi(a)redhat.com
Target Milestone: ---
Classification: Other
In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older
unsupported versions, it is possible for a user to provide malicious input to
cause the insertion of additional log entries.
References:
https://tanzu.vmware.com/security/cve-2021-22096
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2034584
1 year
[Bug 1819818] New: Please package fop for epel-8
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1819818
Bug ID: 1819818
Summary: Please package fop for epel-8
Product: Fedora EPEL
Version: epel8
Hardware: All
OS: Linux
Status: NEW
Component: fop
Severity: medium
Assignee: rlandman(a)redhat.com
Reporter: TicoTimo(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: c.david86(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, rhbugs(a)n-dimensional.de,
rlandman(a)redhat.com, tim(a)tim-landscheidt.de
Target Milestone: ---
Classification: Fedora
fop was available in CentOS-7:
http://mirror.centos.org/centos/7/os/x86_64/Packages/fop-1.1-6.el7.noarch...
It is still available Fedora.
This is the one package missing from claiming full support for CentOS-8 for
Yocto Project (documentation build depends on fop).
NOTE: I am willing to work on this as a co-maintainer. fas: ttorling
-------------
Naively cloning f30 branch and performing a local build (on CentOS-8)
(fop-2.2):
ant is available as module
error: Failed build dependencies:
apache-commons,
avalon-framework,
batik,
fontbox,
javapackages-local,
junit,
qdox,
servlet,
xmlgraphics-commons,
xmlunit
Similar for f32 branch (fop-2.4).
error: Failed build dependencies:
apache-commons-io
apache-commons-logging
batik
fontbox
javapackages-local
junit
qdox
servlet
xmlgraphics-commons
xmlunit
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 1 month
[Bug 2047343] New: CVE-2022-21363 mysql-connector-java: Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2047343
Bug ID: 2047343
Summary: CVE-2022-21363 mysql-connector-java: Difficult to
exploit vulnerability allows high privileged attacker
with network access via multiple protocols to
compromise MySQL Connectors
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
anstephe(a)redhat.com, aos-bugs(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bbuckingham(a)redhat.com, bcourt(a)redhat.com,
bgeorges(a)redhat.com, bibryam(a)redhat.com,
bmaxwell(a)redhat.com, bmontgom(a)redhat.com,
brian.stansberry(a)redhat.com, btotty(a)redhat.com,
cdewolf(a)redhat.com, chazlett(a)redhat.com,
clement.escoffier(a)redhat.com, dandread(a)redhat.com,
darran.lofthouse(a)redhat.com,
databases-maint(a)redhat.com, dkreling(a)redhat.com,
dosoudil(a)redhat.com, drieden(a)redhat.com,
ehelms(a)redhat.com, eleandro(a)redhat.com,
emingora(a)redhat.com, eparis(a)redhat.com,
etirelli(a)redhat.com, fjuma(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gmorling(a)redhat.com, gsmet(a)redhat.com,
hamadhan(a)redhat.com, hbraun(a)redhat.com,
hhorak(a)redhat.com, ibek(a)redhat.com, iweiss(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jburrell(a)redhat.com, jjanco(a)redhat.com,
jnethert(a)redhat.com, jochrist(a)redhat.com,
jokerman(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jpechane(a)redhat.com,
jperkins(a)redhat.com, jrokos(a)redhat.com,
jschatte(a)redhat.com, jsherril(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com,
ljavorsk(a)redhat.com, lthon(a)redhat.com,
lzap(a)redhat.com, mhulan(a)redhat.com, mkulik(a)redhat.com,
mmccune(a)redhat.com, mmuzila(a)redhat.com,
mnovotny(a)redhat.com, mschorm(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, myarboro(a)redhat.com,
nmoumoul(a)redhat.com, nstielau(a)redhat.com,
nwallace(a)redhat.com, odubaj(a)redhat.com,
orabin(a)redhat.com, pantinor(a)redhat.com,
pcreech(a)redhat.com, pdelbell(a)redhat.com,
peholase(a)redhat.com, pgallagh(a)redhat.com,
pjindal(a)redhat.com, pmackay(a)redhat.com,
probinso(a)redhat.com, puntogil(a)libero.it,
rchan(a)redhat.com, rguimara(a)redhat.com,
rrajasek(a)redhat.com, rruss(a)redhat.com,
rstancel(a)redhat.com, rsvoboda(a)redhat.com,
sbiarozk(a)redhat.com, sd-operator-metering(a)redhat.com,
sdouglas(a)redhat.com, smaestri(a)redhat.com,
sponnaga(a)redhat.com, steve.traylen(a)cern.ch,
tflannag(a)redhat.com, tom.jenkinson(a)redhat.com,
tzimanyi(a)redhat.com, xjakub(a)fi.muni.cz,
yborgess(a)redhat.com, zmiklank(a)redhat.com
Target Milestone: ---
Classification: Other
Vulnerability in the MySQL Connectors product of Oracle MySQL (component:
Connector/J). Supported versions that are affected are 8.0.27 and prior.
Difficult to exploit vulnerability allows high privileged attacker with network
access via multiple protocols to compromise MySQL Connectors. Successful
attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS
3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS
Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).
Reference:
https://www.oracle.com/security-alerts/cpujan2022.html
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2047343
1 year, 1 month