January 2020 - java-sig-commits - Fedora Mailing-Lists

[Bug 1501840] CVE-2017-12629 lucene3: Solr: Code execution via entity expansion [fedora-all]

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1501840 Robbie Harwood <rharwood(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED CC| |rharwood(a)redhat.com Resolution|--- |WONTFIX Last Closed| |2020-01-24 20:48:57 --- Comment #5 from Robbie Harwood <rharwood(a)redhat.com> --- Package is orphaned. -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1501529] CVE-2017-12629 Solr: Code execution via entity expansion

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1501529 Bug 1501529 depends on bug 1501839, which changed state. Bug 1501839 Summary: CVE-2017-12629 solr3: Solr: Code execution via entity expansion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1501839 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |WONTFIX -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1775193] CVE-2019-17570 xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1775193 Mikolaj Izdebski <mizdebsk(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(mizdebsk(a)redhat.c | |om) | |needinfo?(jorton(a)redhat.com | |) | -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1775193] CVE-2019-17570 xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1775193 Mikolaj Izdebski <mizdebsk(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment|review?(mizdebsk(a)redhat.com |review+ #1644752 Flags|) | --- Comment #23 from Mikolaj Izdebski <mizdebsk(a)redhat.com> --- Comment on attachment 1644752 --> https://bugzilla.redhat.com/attachment.cgi?id=1644752 Proposed patch Patch looks good to me. It applies to sources of version 3.1.3. Code looks sane - cast of "cfg" property to XmlRpcStreamRequestConfig is fine as the property is always of type. "isEnabledForExceptions" configuration property is false by default, clients that wish to receive deserialized faultCause from servers need to set it to true. -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1578582] CVE-2018-1258 spring-security-core: Unauthorized Access with Spring Security Method Security

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1578582 Doran Moppert <dmoppert(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|NOTABUG |ERRATA -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1657836] gradle: FTBFS in Fedora rawhide

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1657836 W. Michael Petullo <mike(a)flyn.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mike(a)flyn.org --- Comment #10 from W. Michael Petullo <mike(a)flyn.org> --- Just for the record, and with the understanding that packages are orphaned because they lack volunteers: I would like to package Ghidra (https://ghidra-sre.org/) for Fedora, but Ghidra requires gradle to build. -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1577416] aqute-bnd-5.0.0 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1577416 Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|aqute-bnd-4.3.1 is |aqute-bnd-5.0.0 is |available |available --- Comment #4 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- Latest upstream release: 5.0.0 Current version/release in rawhide: 3.5.0-7.fc31 URL: http://bnd.bndtools.org/ Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/98/ -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1257373] elasticsearch-7.5.2 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1257373 --- Comment #158 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- The following Sources of the specfile are not valid URLs so we cannot automatically build the new version for you. Please use URLs in your Source declarations if possible. - elasticsearch-7.5.2-fedora.tar.xz - getsources.sh - elasticsearch.service.in - elasticsearch.in -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1257373] elasticsearch-7.5.2 is available

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1257373 Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|elasticsearch-7.5.1 is |elasticsearch-7.5.2 is |available |available --- Comment #157 from Upstream Release Monitoring <upstream-release-monitoring(a)fedoraproject.org> --- Latest upstream release: 7.5.2 Current version/release in rawhide: 1.7.1-3.fc24 URL: https://github.com/elasticsearch/elasticsearch Please consult the package updates policy before you issue an update to a stable branch: https://fedoraproject.org/wiki/Updates_Policy More information about the service that created this bug can be found at: https://fedoraproject.org/wiki/Upstream_release_monitoring Please keep in mind that with any upstream change, there may also be packaging changes that need to be made. Specifically, please remember that it is your responsibility to review the new version to ensure that the licensing is still correct and that no non-free or legally problematic items have been added upstream. Based on the information from anitya: https://release-monitoring.org/project/5646/ -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

[Bug 1775193] CVE-2019-17570 xmlrpc: Deserialization of server-side exception from faultCause in XMLRPC error response

by bugzilla＠redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1775193 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends On| |1793702, 1793703 -- You are receiving this mail because: You are on the CC list for the bug.

4 years, 2 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits January 2020