java-sig-commits January 2026

java-sig-commits@lists.fedoraproject.org

1 participants
196 discussions

[Bug 1719748] New: jetty-9.4.19.v20190610 is available
by bugzilla＠redhat.com 05 Oct '26

05 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=1719748 Bug ID: 1719748 Summary: jetty-9.4.19.v20190610 is available Product: Fedora Version: rawhide Status: NEW Component: jetty Keywords: FutureFeature, Triaged Assignee: mat.booth(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jjohnstn(a)redhat.com, krzysztof.daniel(a)gmail.com, mat.booth(a)redhat.com, mizdebsk(a)redhat.com, sochotni(a)redhat.com Target Milestone: --- Classification: Fedora Latest upstream release: 9.4.19.v20190610 Current version/release in rawhide: 9.4.18-2.v20190429.fc31 URL: http://www.eclipse.org/jetty Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/1447/ -- You are receiving this mail because: You are on the CC list for the bug.

1 68

[Bug 2358788] New: lucene-10.2.0 is available
by bugzilla＠redhat.com 03 Oct '26

03 Oct '26

https://bugzilla.redhat.com/show_bug.cgi?id=2358788 Bug ID: 2358788 Summary: lucene-10.2.0 is available Product: Fedora Version: rawhide Status: NEW Component: lucene Keywords: FutureFeature, Triaged Assignee: mkoncek(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: dchen(a)redhat.com, eclipse-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, mkoncek(a)redhat.com Target Milestone: --- Classification: Fedora Releases retrieved: 10.2.0 Upstream release that is considered latest: 10.2.0 Current version/release in rawhide: 10.1.0-3.fc42 URL: http://lucene.apache.org/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/7178/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/lucene -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2358788 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 10

[Bug 2415266] New: apache-commons-lang3-3.20.0 is available
by bugzilla＠redhat.com 29 Sep '26

29 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2415266 Bug ID: 2415266 Summary: apache-commons-lang3-3.20.0 is available Product: Fedora Version: rawhide Status: NEW Component: apache-commons-lang3 Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Releases retrieved: 3.20.0 Upstream release that is considered latest: 3.20.0 Current version/release in rawhide: 3.19.0-1.fc44 URL: http://archive.apache.org/dist/commons/lang/source/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/76/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/apache-commons-lang3 -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2415266 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2427895] New: CVE-2025-12543 resteasy: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF [fedora-43]
by bugzilla＠redhat.com 24 Sep '26

24 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2427895 Bug ID: 2427895 Summary: CVE-2025-12543 resteasy: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF [fedora-43] Product: Fedora Version: 43 Status: NEW Whiteboard: {"flaws": ["3d485e40-cb75-420e-b979-350a66dd3d02"]} Component: resteasy Keywords: Security, SecurityTracking Severity: high Priority: high Assignee: edewata(a)redhat.com Reporter: abhraj(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, cfu(a)redhat.com, edewata(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jmagne(a)redhat.com, mfargett(a)redhat.com Blocks: 2408784 (CVE-2025-12543) Target Milestone: --- Classification: Fedora Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT. https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essent… Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2408784 [Bug 2408784] CVE-2025-12543 undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2427895 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 1

[Bug 2385572] New: resteasy: FTBFS in Fedora rawhide/f43
by bugzilla＠redhat.com 24 Sep '26

24 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2385572 Bug ID: 2385572 Summary: resteasy: FTBFS in Fedora rawhide/f43 Product: Fedora Version: rawhide Status: NEW Component: resteasy Assignee: edewata(a)redhat.com Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, cfu(a)redhat.com, dchen(a)redhat.com, edewata(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jmagne(a)redhat.com, mfargett(a)redhat.com, puntogil(a)libero.it Blocks: 2339432 (F43FTBFS) Target Milestone: --- Classification: Fedora resteasy failed to build from source in Fedora rawhide/f43 https://koji.fedoraproject.org/koji/taskinfo?taskID=135252286 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild Please fix resteasy at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, resteasy will be orphaned. Before branching of Fedora 44, resteasy will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fails… Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=2339432 [Bug 2339432] Fedora 43 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2385572 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 4

[Bug 2211812] New: resteasy-6.2.4.Final is available
by bugzilla＠redhat.com 24 Sep '26

24 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2211812 Bug ID: 2211812 Summary: resteasy-6.2.4.Final is available Product: Fedora Version: rawhide Status: NEW Component: resteasy Keywords: FutureFeature, Triaged Assignee: edewata(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, alexander.m.scheel(a)gmail.com, cfu(a)redhat.com, ckelley(a)redhat.com, dchen(a)redhat.com, edewata(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jmagne(a)redhat.com, mfargett(a)redhat.com, mharmsen(a)redhat.com, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Releases retrieved: 3.15.7.Final Upstream release that is considered latest: 6.2.4.Final Current version/release in rawhide: 3.0.26-25.fc39 URL: https://resteasy.dev/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/11453/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/resteasy -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2211812

1 14

[Bug 2258540] New: mockito-5.9.0 is available
by bugzilla＠redhat.com 23 Sep '26

23 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2258540 Bug ID: 2258540 Summary: mockito-5.9.0 is available Product: Fedora Version: rawhide Status: NEW Component: mockito Keywords: FutureFeature, Triaged Assignee: stuart(a)gathman.org Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jerboaa(a)gmail.com, mizdebsk(a)redhat.com, stuart(a)gathman.org Target Milestone: --- Classification: Fedora Releases retrieved: 5.9.0 Upstream release that is considered latest: 5.9.0 Current version/release in rawhide: 5.8.0-1.fc40 URL: http://mockito.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/7297/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/mockito -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2258540 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 21

[Bug 2238928] New: weld-parent-47 is available
by bugzilla＠redhat.com 22 Sep '26

22 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2238928 Bug ID: 2238928 Summary: weld-parent-47 is available Product: Fedora Version: rawhide Status: NEW Component: weld-parent Keywords: FutureFeature, Triaged Assignee: markku.korkeala(a)kapsi.fi Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, markku.korkeala(a)kapsi.fi, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Releases retrieved: 47 Upstream release that is considered latest: 47 Current version/release in rawhide: 46-5.fc39 URL: http://weld.cdi-spec.org Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/20402/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/weld-parent -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2238928 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 12

[Bug 2349115] New: jackson-modules-base-2.18.3 is available
by bugzilla＠redhat.com 21 Sep '26

21 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2349115 Bug ID: 2349115 Summary: jackson-modules-base-2.18.3 is available Product: Fedora Version: rawhide Status: NEW Component: jackson-modules-base Keywords: FutureFeature, Triaged Assignee: mfargett(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ckelley(a)redhat.com, edewata(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mfargett(a)redhat.com, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Releases retrieved: 2.18.3 Upstream release that is considered latest: 2.18.3 Current version/release in rawhide: 2.18.2-2.fc42 URL: https://github.com/FasterXML/jackson-modules-base Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/11743/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/jackson-modules-base -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2349115 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 14

[Bug 2349114] New: jackson-databind-2.18.3 is available
by bugzilla＠redhat.com 21 Sep '26

21 Sep '26

https://bugzilla.redhat.com/show_bug.cgi?id=2349114 Bug ID: 2349114 Summary: jackson-databind-2.18.3 is available Product: Fedora Version: rawhide Status: NEW Component: jackson-databind Keywords: FutureFeature, Triaged Assignee: mfargett(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: ckelley(a)redhat.com, edewata(a)redhat.com, epel-packagers-sig(a)lists.fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, mfargett(a)redhat.com, michel(a)michel-slm.name, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Releases retrieved: 2.18.3 Upstream release that is considered latest: 2.18.3 Current version/release in rawhide: 2.18.2-2.fc42 URL: https://github.com/FasterXML/jackson-databind/ Please consult the package updates policy before you issue an update to a stable branch: https://docs.fedoraproject.org/en-US/fesco/Updates_Policy/ More information about the service that created this bug can be found at: https://docs.fedoraproject.org/en-US/package-maintainers/Upstream_Release_M… Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from Anitya: https://release-monitoring.org/project/10963/ To change the monitoring settings for the project, please visit: https://src.fedoraproject.org/rpms/jackson-databind -- You are receiving this mail because: You are on the CC list for the bug. https://bugzilla.redhat.com/show_bug.cgi?id=2349114 Report this comment as SPAM: https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-sp…

1 14

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits January 2026