[Bug 2110975] New: mysql-connector-java-8.0.30 is available
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2110975
Bug ID: 2110975
Summary: mysql-connector-java-8.0.30 is available
Product: Fedora
Version: rawhide
Status: NEW
Component: mysql-connector-java
Keywords: FutureFeature, Triaged
Assignee: zmiklank(a)redhat.com
Reporter: upstream-release-monitoring(a)fedoraproject.org
QA Contact: extras-qa(a)fedoraproject.org
CC: hhorak(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jjanco(a)redhat.com, ljavorsk(a)redhat.com,
mkulik(a)redhat.com, mschorm(a)redhat.com,
odubaj(a)redhat.com, puntogil(a)libero.it,
steve.traylen(a)cern.ch, xjakub(a)fi.muni.cz,
zmiklank(a)redhat.com
Target Milestone: ---
Classification: Fedora
Releases retrieved: 8.0.30
Upstream release that is considered latest: 8.0.30
Current version/release in rawhide: 8.0.29-3.fc37
URL: http://dev.mysql.com/downloads/connector/j/?os=26
Please consult the package updates policy before you issue an update to a
stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/
More information about the service that created this bug can be found at:
https://fedoraproject.org/wiki/Upstream_release_monitoring
Please keep in mind that with any upstream change, there may also be packaging
changes that need to be made. Specifically, please remember that it is your
responsibility to review the new version to ensure that the licensing is still
correct and that no non-free or legally problematic items have been added
upstream.
Based on the information from Anitya:
https://release-monitoring.org/project/2038/
To change the monitoring settings for the project, please visit:
https://src.fedoraproject.org/rpms/mysql-connector-java
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2110975
1 year, 9 months
[Bug 1996787] New: objectweb-asm has missing osgi metadata since the upgrade to 9.1
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1996787
Bug ID: 1996787
Summary: objectweb-asm has missing osgi metadata since the
upgrade to 9.1
Product: Fedora
Version: rawhide
Status: NEW
Component: objectweb-asm
Assignee: mizdebsk(a)redhat.com
Reporter: sergio(a)serjux.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dwalluck(a)redhat.com, fnasser(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, mizdebsk(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
objectweb-asm has missing osgi metadata since the upgrade to 9.1
Version-Release number of selected component (if applicable):
objectweb-asm-9.1-3.fc35.noarch.rpm
--
You are receiving this mail because:
You are on the CC list for the bug.
1 year, 9 months
[Bug 2104015] New: native antlr3 depends on to be removed i686 java-openjdk packages
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104015
Bug ID: 2104015
Summary: native antlr3 depends on to be removed i686
java-openjdk packages
Product: Fedora
Version: rawhide
Status: NEW
Component: antlr3
Severity: high
Assignee: loganjerry(a)gmail.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dchen(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jvanek(a)redhat.com,
loganjerry(a)gmail.com, mizdebsk(a)redhat.com,
pmikova(a)redhat.com, sgehwolf(a)redhat.com,
walters(a)redhat.com, zzambers(a)redhat.com
Blocks: 2083750
Target Milestone: ---
Classification: Fedora
Dear maintainer, we are going to drop i686 java packages in f37 -
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
your package (or maybe jsut some subpackage) is directly depending on java and
is native.
Please take care, and adapt your package to exclude java on i686. For your
convenience, there was added macro %{java_arches}, including all arches java is
available on, which you can use to ifarch-out java specific features out in
i686 (on non-java arches). Although for plain java package, the change is as
simple as
https://src.fedoraproject.org/rpms/maven/c/520942645bfd1e4721dacd536a6ccb...,
you can not use it. The ExclusiveArch: %{java_arches} is not going to work for
you, because your package is not simple java application, and also non-java
world depends on it.
See exemplar PR:
https://src.fedoraproject.org/rpms/graphviz/pull-request/9#request_diff
See more details eg in:: https://bugzilla.redhat.com/show_bug.cgi?id=2102298
See why in : https://pagure.io/fesco/issue/2772
Please read carefully proposal:
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
Please see tracking bug for most up to date informations:
https://bugzilla.redhat.com/show_bug.cgi?id=2083750
I'm terribly sorry to report this bug so late in f37 lifecycle. If you can,
please handle this with priority.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2083750
[Bug 2083750] Drop i686 builds of jdk8,11,17 and latest (18) rpms from f37
onwards
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104015
1 year, 9 months
[Bug 2105384] New: truth FTBFS after injection of ExclusiveArch: %{java_arches} noarch, but this macro is not guilty
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2105384
Bug ID: 2105384
Summary: truth FTBFS after injection of ExclusiveArch:
%{java_arches} noarch, but this macro is not guilty
Product: Fedora
Version: rawhide
Status: NEW
Component: truth
Severity: high
Assignee: orion(a)nwra.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jvanek(a)redhat.com,
orion(a)nwra.com, pmikova(a)redhat.com,
sgehwolf(a)redhat.com, zzambers(a)redhat.com
Blocks: 2105362
Target Milestone: ---
Classification: Fedora
Hello! Your package got injected
ExclusiveArch: %{java_arches} noarch
See https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
And failed, to build from sources (FTBFS), however the macro itself is not a
cause. I had checked tha fialure, and the build is failing for longer time
(mostly since jdk17 was introduced).
Please elaborate, or your package will be retired, and orphaned later.
It is also reason, why this bug is not blocking the
https://bugzilla.redhat.com/show_bug.cgi?id=2083750.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2105362
[Bug 2105362] inject `%{java_arches} noarch` to all noarch java dependent
packages
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2105384
1 year, 10 months
[Bug 2104060] New: native jna depends on to be removed i686 java-openjdk packages
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2104060
Bug ID: 2104060
Summary: native jna depends on to be removed i686 java-openjdk
packages
Product: Fedora
Version: rawhide
Status: NEW
Component: jna
Severity: high
Assignee: zmiklank(a)redhat.com
Reporter: jvanek(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: dbhole(a)redhat.com, hhorak(a)redhat.com,
java-maint-sig(a)lists.fedoraproject.org,
java-sig-commits(a)lists.fedoraproject.org,
jhuttana(a)redhat.com, jvanek(a)redhat.com,
mizdebsk(a)redhat.com, odubaj(a)redhat.com,
pmikova(a)redhat.com, sgehwolf(a)redhat.com,
zmiklank(a)redhat.com, zzambers(a)redhat.com
Blocks: 2083750
Target Milestone: ---
Classification: Fedora
Dear maintainer, we are going to drop i686 java packages in f37 -
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
your package (or maybe jsut some subpackage) is directly depending on java and
is native.
Please take care, and adapt your package to exclude java on i686. For your
convenience, there was added macro %{java_arches}, including all arches java is
available on, which you can use to ifarch-out java specific features out in
i686 (on non-java arches). Although for plain java package, the change is as
simple as
https://src.fedoraproject.org/rpms/maven/c/520942645bfd1e4721dacd536a6ccb...,
you can not use it. The ExclusiveArch: %{java_arches} is not going to work for
you, because your package is not simple java application, and also non-java
world depends on it.
See exemplar PR:
https://src.fedoraproject.org/rpms/graphviz/pull-request/9#request_diff
See more details eg in:: https://bugzilla.redhat.com/show_bug.cgi?id=2102298
See why in : https://pagure.io/fesco/issue/2772
Please read carefully proposal:
https://fedoraproject.org/wiki/Changes/Drop_i686_JDKs
Please see tracking bug for most up to date informations:
https://bugzilla.redhat.com/show_bug.cgi?id=2083750
I'm terribly sorry to report this bug so late in f37 lifecycle. If you can,
please handle this with priority.
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=2083750
[Bug 2083750] Drop i686 builds of jdk8,11,17 and latest (18) rpms from f37
onwards
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2104060
1 year, 10 months
[Bug 2058763] New: CVE-2022-24614 metadata-extractor: Out-of-memory when reading a specially crafted JPEG file
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2058763
Bug ID: 2058763
Summary: CVE-2022-24614 metadata-extractor: Out-of-memory when
reading a specially crafted JPEG file
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: low
Priority: low
Assignee: security-response-team(a)redhat.com
Reporter: psampaio(a)redhat.com
CC: aileenc(a)redhat.com, alazarot(a)redhat.com,
anstephe(a)redhat.com, bibryam(a)redhat.com,
cedric.olivier(a)free.fr, chazlett(a)redhat.com,
drieden(a)redhat.com, emingora(a)redhat.com,
etirelli(a)redhat.com, extras-orphan(a)fedoraproject.org,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
hbraun(a)redhat.com, ibek(a)redhat.com,
janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jochrist(a)redhat.com, jolee(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jstastny(a)redhat.com, jwon(a)redhat.com,
krathod(a)redhat.com, kverlaen(a)redhat.com,
mnovotny(a)redhat.com, pantinor(a)redhat.com,
pdelbell(a)redhat.com, pjindal(a)redhat.com,
puntogil(a)libero.it, rguimara(a)redhat.com,
rrajasek(a)redhat.com, tzimanyi(a)redhat.com
Target Milestone: ---
Classification: Other
When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can
be made to allocate large amounts of memory that finally leads to an
out-of-memory error even for very small inputs. This could be used to mount a
denial of service attack against services that use metadata-extractor library.
Upstream bug:
https://github.com/drewnoakes/metadata-extractor/issues/561
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2058763
1 year, 10 months
[Bug 2004820] New: CVE-2021-41079 tomcat: Apache Tomcat DoS with unexpected TLS packet
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2004820
Bug ID: 2004820
Summary: CVE-2021-41079 tomcat: Apache Tomcat DoS with
unexpected TLS packet
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: jwon(a)redhat.com
CC: aileenc(a)redhat.com, akoufoud(a)redhat.com,
alazarot(a)redhat.com, alee(a)redhat.com,
almorale(a)redhat.com, anstephe(a)redhat.com,
asoldano(a)redhat.com, atangrin(a)redhat.com,
avibelli(a)redhat.com, bbaranow(a)redhat.com,
bgeorges(a)redhat.com, bmaxwell(a)redhat.com,
brian.stansberry(a)redhat.com, cdewolf(a)redhat.com,
chazlett(a)redhat.com, cmoulliard(a)redhat.com,
coolsvap(a)gmail.com, csutherl(a)redhat.com,
darran.lofthouse(a)redhat.com, dbecker(a)redhat.com,
dkreling(a)redhat.com, dosoudil(a)redhat.com,
drieden(a)redhat.com, eleandro(a)redhat.com,
etirelli(a)redhat.com, fjuma(a)redhat.com,
ggaughan(a)redhat.com, gmalinko(a)redhat.com,
gzaronikas(a)gmail.com, gzaronik(a)redhat.com,
huwang(a)redhat.com, ibek(a)redhat.com,
ikanello(a)redhat.com, ivan.afonichev(a)gmail.com,
iweiss(a)redhat.com, janstey(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jclere(a)redhat.com, jjoyce(a)redhat.com,
jochrist(a)redhat.com, jolee(a)redhat.com,
jpallich(a)redhat.com, jperkins(a)redhat.com,
jrokos(a)redhat.com, jschatte(a)redhat.com,
jschluet(a)redhat.com, jstastny(a)redhat.com,
jwon(a)redhat.com, krathod(a)redhat.com,
krzysztof.daniel(a)gmail.com, kverlaen(a)redhat.com,
kwills(a)redhat.com, lgao(a)redhat.com, lhh(a)redhat.com,
lpeer(a)redhat.com, lthon(a)redhat.com, mburns(a)redhat.com,
mkolesni(a)redhat.com, mnovotny(a)redhat.com,
msochure(a)redhat.com, msvehla(a)redhat.com,
mszynkie(a)redhat.com, nwallace(a)redhat.com,
pdelbell(a)redhat.com, peholase(a)redhat.com,
pgallagh(a)redhat.com, pjindal(a)redhat.com,
pmackay(a)redhat.com, rguimara(a)redhat.com,
rhcs-maint(a)redhat.com, rrajasek(a)redhat.com,
rruss(a)redhat.com, rstancel(a)redhat.com,
rsvoboda(a)redhat.com, sclewis(a)redhat.com,
scohen(a)redhat.com, slinaber(a)redhat.com,
smaestri(a)redhat.com, szappis(a)redhat.com,
tom.jenkinson(a)redhat.com, tzimanyi(a)redhat.com,
yborgess(a)redhat.com
Blocks: 2004799
Target Milestone: ---
Classification: Other
Apache Tomcat did not properly validate incoming TLS packets. When Tomcat was
configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS, a specially crafted
packet could be used to trigger an infinite loop resulting in a denial of
service. This issue affects the version of Apache Tomcat 10.0.0-M1 to 10.0.2;
9.0.0-M1 to 9.0.43; 8.5.0 to 8.5.63.
Upstream commits:
Tomcat 10.0.4:
https://github.com/apache/tomcat/commit/34115fb3c83f6cd97772232316a492a4c...
Tomcat 9.0.44:
https://github.com/apache/tomcat/commit/d4b340fa8feaf55831f9a59350578f7b6...
Tomcat 8.5.64:
https://github.com/apache/tomcat/commit/b90d4fc1ff44f30e4b3aba622ba6677e3...
Reference:
https://lists.apache.org/thread.html/rccdef0349fdf4fb73a4e4403095446d7fe6...
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2004820
1 year, 10 months