October 2015 - java-sig-commits - Fedora Mailing-Lists

[Bug 1105943] New: akka: FTBFS in rawhide

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1105943 Bug ID: 1105943 Summary: akka: FTBFS in rawhide Product: Fedora Version: rawhide Component: akka Assignee: willb(a)redhat.com Reporter: dennis(a)ausil.us QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, willb(a)redhat.com Blocks: 1105908 Your package akka failed to build from source in current rawhide. http://koji.fedoraproject.org/koji/taskinfo?taskID=6933209 For details on mass rebuild see https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1105908 [Bug 1105908] Fedora 21 Mass Rebuild FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=giGVVdugT3&a=cc_unsubscribe

7 years, 9 months

1
4
0 / 0

[Bug 1013603] New: jspc: Maven metadata is installed incorrectly

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1013603 Bug ID: 1013603 Summary: jspc: Maven metadata is installed incorrectly Product: Fedora Version: rawhide Component: jspc Assignee: pmackinn(a)redhat.com Reporter: mizdebsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, pmackinn(a)redhat.com Description of problem: jspc package installs the same Maven metadata in more than one package. This results in incorrect package provides. Version-Release number of selected component (if applicable): 2.0-0.7.alpha.3 Steps to Reproduce: 1. Look at package provides Actual results: mvn(org.codehaus.mojo.jspc:jspc): jspc: package version: 2.0 provided version: 2.0-alpha-3 jspc-compiler-tomcat6 (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-compilers (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-maven-plugin (jspc): package version: 2.0 provided version: 2.0-alpha-3 mvn(org.codehaus.mojo.jspc:jspc-compiler-api): jspc: package version: 2.0 provided version: 2.0-alpha-3 jspc-compiler-tomcat6 (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-compilers (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-maven-plugin (jspc): package version: 2.0 provided version: 2.0-alpha-3 mvn(org.codehaus.mojo.jspc:jspc-compiler-tomcat6): jspc: package version: 2.0 provided version: 2.0-alpha-3 jspc-compiler-tomcat6 (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-compilers (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-maven-plugin (jspc): package version: 2.0 provided version: 2.0-alpha-3 mvn(org.codehaus.mojo.jspc:jspc-compilers): jspc: package version: 2.0 provided version: 2.0-alpha-3 jspc-compiler-tomcat6 (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-compilers (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-maven-plugin (jspc): package version: 2.0 provided version: 2.0-alpha-3 mvn(org.codehaus.mojo.jspc:jspc-maven-plugin): jspc: package version: 2.0 provided version: 2.0-alpha-3 jspc-compiler-tomcat6 (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-compilers (jspc): package version: 2.0 provided version: 2.0-alpha-3 jspc-maven-plugin (jspc): package version: 2.0 provided version: 2.0-alpha-3 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=Oals1syJlT&a=cc_unsubscribe

7 years, 9 months

1
2
0 / 0

[Bug 958047] New: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported

by Red Hat Bugzilla

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958047 Bug ID: 958047 Summary: woodstox-core: javax.xml.XMLConstants.FEATURE_SECURE_PROCESSING not supported Product: Fedora Version: rawhide Component: woodstox-core Severity: unspecified Priority: unspecified Assignee: jcapik(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com Blocks: 958046 Category: --- This doesn't work: SAXParserFactory factory = new WstxSAXParserFactory(); factory.setFeature(XMLConstants.FEATURE_SECURE_PROCESSING, true); SAXParser parser = factory.newSAXParser(); InputSource is = new InputSource(new FileInputStream(args[0])); parser.parse(is, new DefaultHandler()); It results in: Exception in thread "main" org.xml.sax.SAXNotRecognizedException: Feature 'http://javax.xml.XMLConstants/feature/secure-processing' not recognized As a result, it appears impossible to defend against "billion laughs"-style denial of service attacks, along the lines of: https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding... https://git.fedorahosted.org/cgit/secure-coding.git/tree/defensive-coding... -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=bPCdHpPVN2&a=cc_unsubscribe

7 years, 9 months

1
4
0 / 0

[Bug 1114286] New: felix-bundlerepository-2.0.2 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1114286 Bug ID: 1114286 Summary: felix-bundlerepository-2.0.2 is available Product: Fedora Version: rawhide Component: felix-bundlerepository Keywords: FutureFeature, Triaged Assignee: msrb(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com, msrb(a)redhat.com Latest upstream release: 2.0.2 Current version/release in Fedora Rawhide: 1.6.6-16.fc21 URL: http://felix.apache.org/downloads.cgi Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=HlPTCWV8kg&a=cc_unsubscribe

7 years, 10 months

1
7
0 / 0

[Bug 1266638] New: maven-plugin-bundle-3.0.0 is available

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1266638 Bug ID: 1266638 Summary: maven-plugin-bundle-3.0.0 is available Product: Fedora Version: rawhide Component: maven-plugin-bundle Keywords: FutureFeature, Triaged Assignee: msimacek(a)redhat.com Reporter: upstream-release-monitoring(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, jcapik(a)redhat.com, mizdebsk(a)redhat.com, msimacek(a)redhat.com, msrb(a)redhat.com Latest upstream release: 3.0.0 Current version/release in rawhide: 2.5.4-1.fc24 URL: http://repo2.maven.org/maven2/org/apache/felix/maven-bundle-plugin/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=nlhatFc4hw&a=cc_unsubscribe

7 years, 11 months

1
8
0 / 0

[Bug 958727] New: plexus-utils: XMLWriterUtil should guard against problematic comments

by Red Hat Bugzilla

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958727 Bug ID: 958727 Summary: plexus-utils: XMLWriterUtil should guard against problematic comments Product: Fedora Version: rawhide Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- org.codehaus.plexus.util.xml#writeComment(XMLWriter, String, int, int, int) does not check if the comment includes a "-->" sequence. This means that text contained in the command string could be interpreted as XML, possibly leading to XML injection issues, depending on how this method is being called. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=N5myzkUcYQ&a=cc_unsubscribe

7 years, 11 months

1
6
0 / 0

[Bug 958221] New: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand

by Red Hat Bugzilla

Product: Fedora https://bugzilla.redhat.com/show_bug.cgi?id=958221 Bug ID: 958221 Summary: plexus-utils: directory traversal in org.codehaus.plexus.util.Expand Product: Fedora Version: rawhide Component: plexus-utils Severity: unspecified Priority: unspecified Assignee: fnasser(a)redhat.com Reporter: fweimer(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: fnasser(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, mizdebsk(a)redhat.com Blocks: 958220 Category: --- org.codehaus.plexus.util.Expand does not guard against directory traversal, but such protection is generally expected from unarchiving tools. I think the class should just be deprecated and removed because there do not appear to be any users left (not even a test case). -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=hp1lhU9LQd&a=cc_unsubscribe

7 years, 11 months

1
5
0 / 0

[Bug 1243132] New: Recommend tomcat-native

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1243132 Bug ID: 1243132 Summary: Recommend tomcat-native Product: Fedora Version: rawhide Component: tomcat Assignee: ivan.afonichev(a)gmail.com Reporter: ville.skytta(a)iki.fi QA Contact: extras-qa(a)fedoraproject.org CC: alee(a)redhat.com, ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com, me(a)coolsvap.net Per https://fedoraproject.org/wiki/Packaging:WeakDependencies I think Recommends is fine for this, but if you want to go softer, Suggests works for that. 'git am'able fix attached, let me know if you'd like me to push and build this for devel. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=OxZiNHjLDA&a=cc_unsubscribe

8 years

1
5
0 / 0

[Bug 1262238] New: gradle: Add manual page

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1262238 Bug ID: 1262238 Summary: gradle: Add manual page Product: Fedora Version: rawhide Component: gradle Keywords: FutureFeature Assignee: mizdebsk(a)redhat.com Reporter: mizdebsk(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, mgoldman(a)redhat.com, mizdebsk(a)redhat.com, msimacek(a)redhat.com, mspaulding06(a)gmail.com, msrb(a)redhat.com It would be good to add manpage for gradle command. -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=h9YtqUmhDG&a=cc_unsubscribe _______________________________________________ java-sig-commits mailing list java-sig-commits(a)lists.fedoraproject.org http://lists.fedoraproject.org/postorius/java-sig-commits@lists.fedorapro...

8 years

1
1
0 / 0

[Bug 1193307] New: tomcat: do not provide javax.el:el-api

by Red Hat Bugzilla

https://bugzilla.redhat.com/show_bug.cgi?id=1193307 Bug ID: 1193307 Summary: tomcat: do not provide javax.el:el-api Product: Fedora Version: 22 Component: tomcat Assignee: ivan.afonichev(a)gmail.com Reporter: msrb(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: ivan.afonichev(a)gmail.com, java-sig-commits(a)lists.fedoraproject.org, krzysztof.daniel(a)gmail.com Description of problem: tomcat currently provides, among others, mvn(javax.el:el-api). The problem is that the glassfish-el-api provides it as well. This causes other packages fail to build, if both tomcat and glassfish-el-api happen to be in the buildroot. I think that glassfish-el-api should be the one providing javax.el:el-api, as it is a reference implementation of EL. Java packaging guidelines should be updated as well. Version-Release number of selected component (if applicable): tomcat-8.0.18-1.fc23 -- You are receiving this mail because: You are on the CC list for the bug. Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=kgtemPVawE&a=cc_unsubscribe

8 years

1
2
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits October 2015