July 2019 - java-sig-commits - Fedora Mailing-Lists

[Bug 1702439] New: CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1702439 Bug ID: 1702439 Summary: CVE-2019-0223 qpid-proton: TLS Man in the Middle Vulnerability Product: Security Response Hardware: All OS: Linux Status: NEW Whiteboard: impact=important,public=20190423,reported=20190423,sou rce=oss-security,cvss3=7.4/CVSS:3.0/AV:N/AC:H/PR:N/UI: N/S:U/C:H/I:H/A:N,cwe=CWE-295->CWE-300,fedora-all/qpid -proton-java=notaffected,amq-6/proton-j=new,fuse-6/pro ton-j=new,fuse-7/proton-j=new,vertx-3/proton-j=new,amq -7/qpid-proton=new,fedora-all/qpid-proton=notaffected, rhn_satellite_6/qpid-proton=new,cfme-5/qpid-proton=new ,openstack-7/qpid-proton=new,openstack-8/qpid-proton=n ew,openstack-14/qpid-proton=new,openstack-14-optools/q pid-proton=new,openstack-rdo/qpid-proton=affected,mrg- m-3/qpid-proton=new,rhui-3/qpid-proton=new,rhev-m-4/qp id-proton=new,amq-7/proton-j=new,mrg-m-3/qpid-proton-j ava=new Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team(a)redhat.com Reporter: lpardo(a)redhat.com CC: aileenc(a)redhat.com, apevec(a)redhat.com, ataylor(a)redhat.com, avibelli(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bgeorges(a)redhat.com, bkearney(a)redhat.com, bmcclain(a)redhat.com, btotty(a)redhat.com, chazlett(a)redhat.com, dajohnso(a)redhat.com, dbecker(a)redhat.com, dblechte(a)redhat.com, dfediuck(a)redhat.com, dmetzger(a)redhat.com, eedri(a)redhat.com, esammons(a)redhat.com, gblomqui(a)redhat.com, gmccullo(a)redhat.com, gtanzill(a)redhat.com, hhudgeon(a)redhat.com, iboverma(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jbalunas(a)redhat.com, jfrey(a)redhat.com, jhardy(a)redhat.com, jjoyce(a)redhat.com, jochrist(a)redhat.com, jpallich(a)redhat.com, jprause(a)redhat.com, jross(a)redhat.com, jschluet(a)redhat.com, jshepherd(a)redhat.com, kbasil(a)redhat.com, kdixon(a)redhat.com, kgiusti(a)gmail.com, krathod(a)redhat.com, lhh(a)redhat.com, lpeer(a)redhat.com, lthon(a)redhat.com, mburns(a)redhat.com, mcressma(a)redhat.com, messaging-bugs(a)redhat.com, mgoldboi(a)redhat.com, michal.skrivanek(a)redhat.com, mmccune(a)redhat.com, mszynkie(a)redhat.com, obarenbo(a)redhat.com, pgallagh(a)redhat.com, puntogil(a)libero.it, rchan(a)redhat.com, rhos-maint(a)redhat.com, rjerrido(a)redhat.com, roliveri(a)redhat.com, rrajasek(a)redhat.com, rruss(a)redhat.com, sbonazzo(a)redhat.com, sclewis(a)redhat.com, sherold(a)redhat.com, simaishi(a)redhat.com, slinaber(a)redhat.com, tjay(a)redhat.com, trogers(a)redhat.com Target Milestone: --- Classification: Other The TLS support in Apache Qpid Proton 0.9 - 0.27.0 when using OpenSSL prior to 1.1.0 can under some circumstances connect as a client to a TLS server that offers anonymous ciphers irrespective of whether the client was configured to verify the server's certificate or certificate against the hostname used to connect. This means that an undetected man in the middle attack could be constructed if an attacker can arrange to intercept TLS traffic. This includes the Qpid Proton C library, and all language binding libraries using it. This attack will not work if client certificate authentication is in use as anonymous ciphers cannot be used in this case. References: https://issues.apache.org/jira/browse/PROTON-2014 https://qpid.apache.org/cves/CVE-2019-0223.html Upstream Patch: https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=97c7733 https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=159fac1 https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=4aea0fd https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=2d3ba8a -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 4 months

1
67
0 / 0

[Bug 1703402] New: CVE-2019-2692 mysql-connector-java: privilege escalation in MySQL connector

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1703402 Bug ID: 1703402 Summary: CVE-2019-2692 mysql-connector-java: privilege escalation in MySQL connector Product: Security Response Hardware: All OS: Linux Status: NEW Whiteboard: impact=moderate,public=20190423,reported=20190424,sour ce=cve,cvss3=6.3/CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/ I:H/A:H,cwe=CWE-843,fedora-all/mysql-connector-java=no taffected,openshift-enterprise-3/mysql-connector-java= new,fsw-6/mysql-connector-java=new,fuse-7/mysql-connec tor-java=new,rhel-6/mysql-connector-java=new,rhel-7/my sql-connector-java=new,rhn_satellite_6/mysql-connector -java=new Component: vulnerability Keywords: Security Severity: medium Priority: medium Assignee: security-response-team(a)redhat.com Reporter: darunesh(a)redhat.com CC: ahardin(a)redhat.com, aileenc(a)redhat.com, bbuckingham(a)redhat.com, bcourt(a)redhat.com, bkearney(a)redhat.com, bleanhar(a)redhat.com, btotty(a)redhat.com, ccoleman(a)redhat.com, chazlett(a)redhat.com, databases-maint(a)redhat.com, dedgar(a)redhat.com, eparis(a)redhat.com, gvarsami(a)redhat.com, hhorak(a)redhat.com, hhudgeon(a)redhat.com, janstey(a)redhat.com, java-sig-commits(a)lists.fedoraproject.org, jcoleman(a)redhat.com, jgoulding(a)redhat.com, jjanco(a)redhat.com, jochrist(a)redhat.com, jokerman(a)redhat.com, kconner(a)redhat.com, ldimaggi(a)redhat.com, mchappel(a)redhat.com, mmccune(a)redhat.com, mmuzila(a)redhat.com, mschorm(a)redhat.com, nwallace(a)redhat.com, puntogil(a)libero.it, rchan(a)redhat.com, rjerrido(a)redhat.com, rwagner(a)redhat.com, steve.traylen(a)cern.ch, tcunning(a)redhat.com, tkirby(a)redhat.com, xjakub(a)fi.muni.cz Target Milestone: --- Classification: Other Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. Reference: http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 4 months

1
10
0 / 0

[Bug 1691250] New: Upgrade snmp4j to 3.0.2

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1691250 Bug ID: 1691250 Summary: Upgrade snmp4j to 3.0.2 Product: Fedora Version: rawhide Status: NEW Component: snmp4j Keywords: Rebase Assignee: puntogil(a)libero.it Reporter: sbonazzo(a)redhat.com QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Fedora currently ships 2.4.1 (2015-12-30) while upstream released 3.0.2 (2018-10-10) -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
3
0 / 0

[Bug 1663016] New: OpenNLP 1.9.1 available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1663016 Bug ID: 1663016 Summary: OpenNLP 1.9.1 available Product: Fedora Version: 29 Hardware: x86_64 OS: Linux Status: NEW Component: opennlp Severity: low Assignee: puntogil(a)libero.it Reporter: edgar.hoch(a)ims.uni-stuttgart.de QA Contact: extras-qa(a)fedoraproject.org CC: java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Target Milestone: --- Classification: Fedora Created attachment 1518001 --> https://bugzilla.redhat.com/attachment.cgi?id=1518001&action=edit opennlp.spec for 1.9.1 Description of problem: OpenNLP package distributed by Fedora 29 is more that four years old. Current OpenNLP version is 1.9.1. I have used the spec file of opennlp-1.5.3-7.fc29 and modified it until mock creates packages for version 1.9.1. It may be that it can be more optimized. It would be nice if someone could check it and creates updated packages for the public. Version-Release number of selected component (if applicable): opennlp-1.5.3-7.fc29.noarch -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
5
0 / 0

[Bug 1735464] New: artemis-wildfly-integration: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735464 Bug ID: 1735464 Summary: artemis-wildfly-integration: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: artemis-wildfly-integration Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora artemis-wildfly-integration failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36632055 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix artemis-wildfly-integration at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, artemis-wildfly-integration will be orphaned. Before branching of Fedora 32, artemis-wildfly-integration will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
18
0 / 0

[Bug 1735463] New: artemis: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735463 Bug ID: 1735463 Summary: artemis: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: artemis Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora artemis failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36632052 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix artemis at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, artemis will be orphaned. Before branching of Fedora 32, artemis will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
19
0 / 0

[Bug 1735455] New: apacheds: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735455 Bug ID: 1735455 Summary: apacheds: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: apacheds Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora apacheds failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36632004 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix apacheds at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, apacheds will be orphaned. Before branching of Fedora 32, apacheds will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
19
0 / 0

[Bug 1735452] New: annox: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735452 Bug ID: 1735452 Summary: annox: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: annox Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora annox failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36631993 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix annox at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, annox will be orphaned. Before branching of Fedora 32, annox will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
19
0 / 0

[Bug 1735415] New: HikariCP: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735415 Bug ID: 1735415 Summary: HikariCP: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: HikariCP Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, lef(a)fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora HikariCP failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36631602 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix HikariCP at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, HikariCP will be orphaned. Before branching of Fedora 32, HikariCP will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
19
0 / 0

[Bug 1735407] New: 99soft-oss-parent: FTBFS in Fedora rawhide/f31

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1735407 Bug ID: 1735407 Summary: 99soft-oss-parent: FTBFS in Fedora rawhide/f31 Product: Fedora Version: rawhide Status: NEW Component: 99soft-oss-parent Assignee: extras-orphan(a)fedoraproject.org Reporter: releng(a)fedoraproject.org QA Contact: extras-qa(a)fedoraproject.org CC: extras-orphan(a)fedoraproject.org, java-sig-commits(a)lists.fedoraproject.org, puntogil(a)libero.it Blocks: 1732841 Target Milestone: --- Classification: Fedora 99soft-oss-parent failed to build from source in Fedora rawhide/f31 https://koji.fedoraproject.org/koji/taskinfo?taskID=36631551 For details on the mass rebuild see: https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild Please fix 99soft-oss-parent at your earliest convenience and set the bug's status to ASSIGNED when you start fixing it. If the bug remains in NEW state for 8 weeks, 99soft-oss-parent will be orphaned. Before branching of Fedora 32, 99soft-oss-parent will be retired, if it still fails to build. For more details on the FTBFS policy, please visit: https://fedoraproject.org/wiki/Fails_to_build_from_source Referenced Bugs: https://bugzilla.redhat.com/show_bug.cgi?id=1732841 [Bug 1732841] (F31FTBFS) - Fedora 31 FTBFS Tracker -- You are receiving this mail because: You are on the CC list for the bug.

3 years, 5 months

1
20
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits July 2019