[Bug 924448] New: CVE-2013-1879 ActiveMQ: XSS vulnerability in scheduled.jsp [fedora-18]
by Red Hat Bugzilla
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=924448
Bug ID: 924448
Summary: CVE-2013-1879 ActiveMQ: XSS vulnerability in
scheduled.jsp [fedora-18]
Product: Fedora
Version: 18
Component: activemq
Keywords: Security, SecurityTracking
Severity: medium
Priority: medium
Assignee: mspaulding06(a)gmail.com
Reporter: kseifried(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: agrimm(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
mspaulding06(a)gmail.com
Blocks: 924446 (CVE-2013-1879)
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please use the bodhi submission link
noted in the next comment(s). This will include the bug IDs of this
tracking bug as well as the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
Bodhi notes field when available.
fedora-18 tracking bug for activemq: see blocks bug list for full details of
the security issue(s).
[bug automatically created by: add-tracking-bugs]
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=7uln0KGpXW&a=cc_unsubscribe
10 years, 2 months
[Bug 842346] New: Properly migrate tomcat to systemd
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=842346
Bug ID: 842346
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: rawhide
Priority: unspecified
CC: akurtako(a)redhat.com, ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
kdaniel(a)redhat.com
Assignee: ivan.afonichev(a)gmail.com
Summary: Properly migrate tomcat to systemd
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: johannbg(a)gmail.com
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: tomcat
Product: Fedora
Description of problem:
Let's try and properly migrate tomcat to native systemd units the
tomcat.service is just an ugly hack.
I propose that we split tomcat startup into 4 units...
1 tomcat.service
2 tomcat-security.service
3 tomcat@.service ( For multiple instances )
4.tomcat-security@.service ( For multiple instance )
Have all the required environmental parameters in one configuration file only
( /etc/tomcat/tomcat.conf )
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 5 months
[Bug 957181] New: hawtjni: missing barriers in cache initialization
by Red Hat Bugzilla
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=957181
Bug ID: 957181
Summary: hawtjni: missing barriers in cache initialization
Product: Fedora
Version: rawhide
Component: hawtjni
Severity: unspecified
Priority: unspecified
Assignee: mgoldman(a)redhat.com
Reporter: fweimer(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mgoldman(a)redhat.com, mizdebsk(a)redhat.com
Blocks: 957130
Category: ---
The following code is generated from the example:
void cachebarFields(JNIEnv *env, jobject lpObject)
{
if (barFc.cached) return;
barFc.clazz = env->GetObjectClass(lpObject);
barFc.a = env->GetFieldID(barFc.clazz, "a", "I");
barFc.b = env->GetFieldID(barFc.clazz, "b", "J");
barFc.c = env->GetFieldID(barFc.clazz, "c", "[B");
barFc.c5 = env->GetFieldID(barFc.clazz, "c5", "B");
barFc.prev = env->GetFieldID(barFc.clazz, "prev", "J");
barFc.cached = 1;
}
There are no barriers, so readers may observe the write to the "cached" member
before the other members.
(One of the barFc.cached checks is redundant, BTW.)
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=eKi1w394jB&a=cc_unsubscribe
10 years, 6 months
[Bug 912333] New: mvn-rpmbuild if F19 does not export M2_HOME
by Red Hat Bugzilla
Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=912333
Bug ID: 912333
Summary: mvn-rpmbuild if F19 does not export M2_HOME
Product: Fedora
Version: rawhide
Component: javapackages-tools
Severity: unspecified
Priority: unspecified
Reporter: mattias.ellert(a)fysast.uu.se
Description of problem:
mvn-rpmbuild on Fedora 19 does not export M2_HOME
Version-Release number of selected component (if applicable):
javapackages-tools.noarch 0:0.12.0-1.fc19
How reproducible:
Packages in the f19 rebuild failed due to M2_HOME not set. See e.g.
https://koji.fedoraproject.org/koji/taskinfo?taskID=4996219
Error message is:
"Maven application directory was not specified, and ${maven.home} is not
provided in the system properties. Please specify at least on of these."
The code generating this error message is:
if ( ( mavenHome == null ) && ( System.getProperty( "maven.home" ) == null ) )
{
if ( !getSystemEnvVars().containsKey( "M2_HOME" ) )
{
throw new IllegalStateException( "Maven application directory was
+ "specified, and ${maven.home} is not provided in the system "
+ "properties. Please specify at least on of these." );
}
}
I.e. if M2_HOME is set (like in mvn-rpmbuild for Fedora 18 and earlier) the
exception is not thrown.
Actual results:
Failed builds due to M2_HOME not set
Expected results:
Working build
Additional info:
mvn-rpmbuild on Fedora 17 contains the line
export M2_HOME=/usr/share/maven
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=U9jVwfslmC&a=cc_unsubscribe
10 years, 6 months
[Bug 875817] New: Port velocity not to use werken-xpath
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=875817
Bug ID: 875817
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: rawhide
Priority: unspecified
CC: devrim(a)gunduz.org,
java-sig-commits(a)lists.fedoraproject.org,
mizdebsk(a)redhat.com, sochotni(a)redhat.com
Assignee: sochotni(a)redhat.com
Summary: Port velocity not to use werken-xpath
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: sochotni(a)redhat.com
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: velocity
Product: Fedora
Description of problem:
werken is an old unmaintained library. Velocity should be ported away and just
use standard Java interfaces preferably. Needs getting in touch with upstream
of course
Slightly related bugreports upstream:
https://issues.apache.org/jira/browse/VELOCITY-757
https://issues.apache.org/jira/browse/VELOCITY-694
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 6 months
[Bug 875777] New: Snakeyaml bundles base64coder and part of gdata-utils
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=875777
Bug ID: 875777
QA Contact: extras-qa(a)fedoraproject.org
Severity: unspecified
Version: rawhide
Priority: unspecified
CC: java-sig-commits(a)lists.fedoraproject.org,
jcapik(a)redhat.com, mizdebsk(a)redhat.com,
mmorsi(a)redhat.com
Assignee: jcapik(a)redhat.com
Summary: Snakeyaml bundles base64coder and part of gdata-utils
Regression: ---
Story Points: ---
Classification: Fedora
OS: Unspecified
Reporter: sochotni(a)redhat.com
Type: Bug
Documentation: ---
Hardware: Unspecified
Mount Type: ---
Status: NEW
Component: snakeyaml
Product: Fedora
Description of problem:
src/main/java/org/yaml/snakeyaml/external contains external modules that are
source-bundled within snakeyaml. Ideally they should be unbunled (they are
already packaged separately)
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 7 months
[Bug 880297] New: Missing license file
by Red Hat Bugzilla
Product: Red Hat Enterprise Linux 7
https://bugzilla.redhat.com/show_bug.cgi?id=880297
Bug ID: 880297
Summary: Missing license file
Product: Red Hat Enterprise Linux 7
Version: 7.0
Component: maven-plugin-exec
Severity: unspecified
Priority: unspecified
Reporter: edewata(a)redhat.com
Depends On: 880290
+++ This bug was initially created as a clone of Bug #880290 +++
[2012-11-23 08:11:21] sochotni:
Upstream tarball contains LICENSE.txt which is MIT + pom.xml lists ASL 2.0 as
license and most of source files have ASL 2.0 headers.
spec file removes LICENSE.txt saying no file is actually licensed under that
license. As I understand it, files that do not have ASL 2.0 headers are MIT
actually.
Also since this is ASL 2.0 licensed package: ASL 2.0 license text has to be
included
--
You are receiving this mail because:
You are on the CC list for the bug.
10 years, 7 months