[SECURITY] Fedora 32 Update: jetty-9.4.31-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : jetty
Product : Fedora 32
Version : 9.4.31
Release : 2.fc32
URL : http://www.eclipse.org/jetty/
Summary : Java Webserver and Servlet Container
Description :
Jetty is a 100% Java HTTP Server and Servlet Container. This means that you
do not need to configure and run a separate web server (like Apache) in order
to use Java, servlets and JSPs to generate dynamic content. Jetty is a fully
featured web server for static and dynamic content. Unlike separate
server/container solutions, this means that your web server and web
application run in the same process, without interconnection overheads
and complications. Furthermore, as a pure java component, Jetty can be simply
included in your application for demonstration, distribution or deployment.
Jetty is available on all Java supported platforms.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Aug 13 2020 Mat Booth <mat.booth(a)redhat.com> - 9.4.31-2
- Reflective use of classes that might not be present in the JDK should be
optional when expressed as OSGi dependencies
* Wed Aug 12 2020 Mat Booth <mat.booth(a)redhat.com> - 9.4.31-1
- Update to latest upstream release
* Tue Jul 28 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 9.4.30-3.v20200611
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Fri Jul 10 2020 Jiri Vanek <jvanek(a)redhat.com> - 9.4.30-2.v20200611
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
* Thu Jun 18 2020 Mat Booth <mat.booth(a)redhat.com> - 9.4.30-1.v20200611
- Update to latest upstream release
* Fri Mar 20 2020 Mat Booth <mat.booth(a)redhat.com> - 9.4.27-1.v20200227
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-webtools-3.18.0-4.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-webtools
Product : Fedora 32
Version : 3.18.0
Release : 4.fc32
URL : http://www.eclipse.org/webtools/
Summary : Eclipse Webtools Projects
Description :
Eclipse Webtools. This contains sub-packages for different sub-projects
of Eclipse Webtools project, including Server Tools, SourceEditing Tools,
Webservices Tools, Java EE Tools, JSF Tools, and Dali (JPA) Tools.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.18.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 16 2020 Mat Booth <mat.booth(a)redhat.com> - 3.18.0-3
- Remove no longer needed dep on jdom and json-simple and add missing BRs
on xml deps
- Drop xsl and xpath features
- Always use java 1.8 for building due to use of CORBA
* Fri Jul 10 2020 Mat Booth <mat.booth(a)redhat.com> - 3.18.0-2
- Drop javaee/webservices/jsf plugins
* Wed Jun 24 2020 Mat Booth <mat.booth(a)redhat.com> - 3.18.0-1
- Update to latest upstream release
* Fri Jan 24 2020 Mat Booth <mat.booth(a)redhat.com> - 3.15.0-4
- Drop JPA tooling and remove requirement on Datatools
* Mon Dec 9 2019 Mat Booth <mat.booth(a)redhat.com> - 3.15.0-3
- Fix build against latest jetty version
* Mon Dec 9 2019 Mat Booth <mat.booth(a)redhat.com> - 3.15.0-2
- Drop JSDT features
* Mon Sep 16 2019 Mat Booth <mat.booth(a)redhat.com> - 3.15.0-1
- Update to latest upstream release
* Wed Jun 26 2019 Mat Booth <mat.booth(a)redhat.com> - 3.14.0-3
- Build missing xinclude embedded jar
* Fri Jun 14 2019 Mat Booth <mat.booth(a)redhat.com> - 3.14.0-2
- Avoid running out of heap on s390x
* Wed Jun 12 2019 Mat Booth <mat.booth(a)redhat.com> - 3.14.0-1
- Update to latest upstream release
* Tue Jun 11 2019 Mat Booth <mat.booth(a)redhat.com> - 3.13.0-2
- Avoid using jgit providers from tycho-extras
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-mylyn-3.25.0-3.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-mylyn
Product : Fedora 32
Version : 3.25.0
Release : 3.fc32
URL : http://www.eclipse.org/mylyn
Summary : Eclipse Mylyn main feature.
Description :
Mylyn integrates task support into Eclipse. It supports offline editing
for certain task repositories and monitors work activity to hide
information that is not relevant to the current task.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Jan 28 2020 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-3
- Drop mylyn-docs subpackage (wikitext and epub support) to really simplify the
package
* Tue Sep 17 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-2
- Correct duplicate invokations
* Fri Sep 13 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-1
- Update to final tagged release of 3.25.0
* Mon Jun 17 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.11
- Some bundles still are EPL 1
* Fri Jun 14 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.10
- Update to latest upstream build
- Update licence tag
* Tue May 14 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.9
- Add conditional build for epub support
* Fri May 10 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.8
- Don't build and ship tests
* Thu May 9 2019 Mat Booth <mat.booth(a)redhat.com> - 3.25.0-0.7
- Drop ship incubating components, they are not maintained upstream
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-mpc-1.8.3-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-mpc
Product : Fedora 32
Version : 1.8.3
Release : 2.fc32
URL : http://www.eclipse.org/mpc/
Summary : Eclipse Marketplace Client
Description :
The Eclipse Marketplace Client provides access to extension catalogs.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.8.3-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jun 22 2020 Mat Booth <mat.booth(a)redhat.com> - 1.8.3-1
- Update to latest upstream release
* Sun Mar 22 2020 Mat Booth <mat.booth(a)redhat.com> - 1.8.2-1
- Update to latest upstream release
- Remove useless dep on maven-enforcer
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-m2e-core-1.16.1-1.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-m2e-core
Product : Fedora 32
Version : 1.16.1
Release : 1.fc32
URL : https://eclipse.org/m2e/
Summary : Maven integration for Eclipse
Description :
The goal of the m2ec project is to provide a first-class Apache Maven support
in the Eclipse IDE, making it easier to edit Maven's pom.xml, run a build from
the IDE and much more. For Java developers, the very tight integration with JDT
greatly simplifies the consumption of Java artifacts either being hosted on open
source repositories such as Maven Central, or in your in-house Maven repository.
m2e is also a platform that let others provide better integration with
additional Maven plugins (e.g. Android, web development, etc.), and facilitates
the distribution of those extensions through the m2e marketplace.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 14 2020 Mat Booth <mat.booth(a)redhat.com> - 1.16.1-1
- Update to latest upstream release
* Thu Aug 6 2020 Mat Booth <mat.booth(a)redhat.com> - 1.16.0-7
- Fix broken requires
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1.16.0-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 16 2020 Mat Booth <mat.booth(a)redhat.com> - 1.16.0-5
- Remove explicit BR on javax.annotation-api, since Eclipse platform will pull
in either the javax or jakarta version as required
* Mon Jul 13 2020 Jiri Vanek <jvanek(a)redhat.com> - 1.16.0-4
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
* Mon Jul 13 2020 Mat Booth <mat.booth(a)redhat.com> - 1.16.0-3
- Patch out dep on aether and obsolete javadoc package
* Fri Jul 10 2020 Jiri Vanek <jvanek(a)redhat.com> - 1.16.0-2
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
* Thu Jun 25 2020 Mat Booth <mat.booth(a)redhat.com> - 1.16.0-1
- Update to latest upstream release
* Wed Apr 1 2020 Mat Booth <mat.booth(a)redhat.com> - 1.15.0-3
- Add patch to fix NoClassDefFoundErrors
* Wed Mar 25 2020 Mat Booth <mat.booth(a)redhat.com> - 1.15.0-2
- Improve archetype patch
* Sun Mar 22 2020 Mat Booth <mat.booth(a)redhat.com> - 1.15.0-1
- Update to latest upstream release
* Tue Jan 7 2020 Mat Booth <mat.booth(a)redhat.com> - 1.14.0-2
- Correctly obsolete tests
* Fri Dec 20 2019 Mat Booth <mat.booth(a)redhat.com> - 1.14.0-1
- Update to latest upstream release
- Don't build and ship tests
* Thu Aug 1 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-8
- Rebuild against new maven-archetype and regenerate runtime requires
* Tue Jul 2 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-7
- Re-generate OSGi BRs
* Mon Jul 1 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-6
- Drop hard requirement on xbean, not really needed by maven
* Fri Jun 21 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-5
- Backport fix to correct 'Failed to evaluate: ReferenceExpression' errors in
log
* Tue Jun 18 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-4
- Rebuild against maven-indexer 6.0
* Wed Jun 12 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-3
- Add obsoletes for eclipse-m2e-sourcelookup
* Wed Jun 12 2019 Mat Booth <mat.booth(a)redhat.com> - 1.11.0-2
- Fix build against modularised maven-resolver
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-gef-3.11.0-13.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-gef
Product : Fedora 32
Version : 3.11.0
Release : 13.fc32
URL : http://www.eclipse.org/gef/
Summary : Graphical Editing Framework (GEF) Eclipse plug-in
Description :
The Graphical Editing Framework (GEF) allows developers to create a rich
graphical editor from an existing application model. GEF is completely
application neutral and provides the groundwork to build almost any
application, including but not limited to: activity diagrams, GUI builders,
class diagram editors, state machines, and even WYSIWYG text editors.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.11.0-13
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Mar 23 2020 Mat Booth <mat.booth(a)redhat.com> - 3.11.0-12
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-4.16-11.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse
Product : Fedora 32
Version : 4.16
Release : 11.fc32
URL : http://www.eclipse.org/
Summary : An open, extensible IDE
Description :
The Eclipse platform is designed for building integrated development
environments (IDEs), server-side applications, desktop applications, and
everything in between.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Aug 21 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-11
- Rebuild with a dependency on obsolete log4j package
- Run mvn_install with Java 11
* Wed Aug 19 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-10
- Rebuild against jakarta servlet API and updated batik
- Update eclipse-build snapshot
* Fri Aug 14 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-9
- Restore explicit glassfish-annotation-api dep
* Fri Aug 14 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-8
- Rebuild for new jetty version
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:4.16-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Tue Jul 21 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-6
- Require Java 11 explicitly
- Drop hotspot exclusions from the JDK 6 era
* Fri Jul 10 2020 Jiri Vanek <jvanek(a)redhat.com> - 1:4.16-5
- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11
* Mon Jun 29 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-4
- Update linux-build snapshot and fix adding junit classpath containers to java
projects
* Tue Jun 23 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-3
- Make a bit more portable and fix bootstrap mode
* Fri Jun 19 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-2
- Non-bootstrap build
* Thu Jun 18 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.16-1
- Update to latest upstream release
* Thu Apr 2 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.15-5
- Make the requirement on felix-scr more strict
* Thu Apr 2 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.15-4
- Allow library detector to build on Java 11
* Sun Mar 29 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.15-3
- Don't build and ship the test framework. We are not shipping any actual tests
anyway and this allows to drop the dependency on mockito and friends.
* Mon Mar 23 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.15-2
- Set compiler release to Java 8 on certain bundles
* Sat Mar 21 2020 Mat Booth <mat.booth(a)redhat.com> - 1:4.15-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-ecf-3.14.8-4.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-ecf
Product : Fedora 32
Version : 3.14.8
Release : 4.fc32
URL : https://www.eclipse.org/ecf/
Summary : Eclipse Communication Framework (ECF) Eclipse plug-in
Description :
ECF is a set of frameworks for building communications into applications and
services. It provides a lightweight, modular, transport-independent, fully
compliant implementation of the OSGi Remote Services standard.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Aug 10 2020 Mat Booth <mat.booth(a)redhat.com> - 3.14.8-4
- Allow building on JDK 11
* Sat Aug 1 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.8-3
- Second attempt - Rebuilt for
https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.14.8-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jun 18 2020 Mat Booth <mat.booth(a)redhat.com> - 3.14.8-1
- Update to latest upstream release
- License switch to EPL 2
* Fri Mar 20 2020 Mat Booth <mat.booth(a)redhat.com> - 3.14.7-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months
[SECURITY] Fedora 32 Update: eclipse-emf-2.22.0-2.fc32
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------
Name : eclipse-emf
Product : Fedora 32
Version : 2.22.0
Release : 2.fc32
URL : https://www.eclipse.org/modeling/emf/
Summary : EMF and XSD Eclipse plug-ins
Description :
The Eclipse Modeling Framework (EMF) and XML Schema Definition (XSD) plug-ins.
--------------------------------------------------------------------------------
Update Information:
Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://www.eclipse.org/eclipseide/2020-06/noteworthy/ Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------
ChangeLog:
* Mon Jul 27 2020 Fedora Release Engineering <releng(a)fedoraproject.org> - 1:2.22.0-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jun 18 2020 Mat Booth <mat.booth(a)redhat.com> - 1:2.22.0-1
- Update to latest upstream release
* Fri Mar 20 2020 Mat Booth <mat.booth(a)redhat.com> - 1:2.21.0-1
- Update to latest upstream release
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
https://bugzilla.redhat.com/show_bug.cgi?id=1848617
[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
3 years, 7 months