November 2006 - jboss-jira - Jboss List Archives

[JBoss JIRA] Created: (JBCACHE-872) Lock release methods should produce similar log messages to lock acquire methods

by Galder Zamarreno (JIRA)

Lock release methods should produce similar log messages to lock acquire methods -------------------------------------------------------------------------------- Key: JBCACHE-872 URL: http://jira.jboss.com/jira/browse/JBCACHE-872 Project: JBoss Cache Issue Type: Bug Security Level: Public (Everyone can see) Affects Versions: 1.4.0.SP1, 1.3.0.SP3, 2.0.0.ALPHA1 Reporter: Galder Zamarreno Assigned To: Manik Surtani Priority: Minor lock acquire methods in org.jboss.cache.Node provide TRACE level logs such as: acquiring RL/WL.... ... acquired RL/WL.... lock release methods should provide similar log messages to facilitate transaction debugging. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

2
2
0 / 0

Una empresa 100% Chilena!

by Hosting 100% Chileno

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Closed: (JBAS-3861) DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem

by Dimitris Andreadis (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3861?page=all ] Dimitris Andreadis closed JBAS-3861. ------------------------------------ Resolution: Done Fixed in all branches (3.2.x, 4.0.x, 4.2.x, HEAD). > DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem > -------------------------------------------------------------------------------------- > > Key: JBAS-3861 > URL: http://jira.jboss.com/jira/browse/JBAS-3861 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Management services > Affects Versions: JBossAS-4.0.5.GA, JBossAS-4.0.4.GA, JBossAS-3.2.8.SP1, JBossAS-3.2.8 Final, JBossAS-4.0.3 Final, JBossAS-4.0.2 Final, JBossAS-4.0.1 SP1, JBossAS-4.0.1 Final, JBossAS-3.2.7 Final, JBossAS-3.2.6 Final, JBossAS-4.0.0 Final, JBossAS-3.2.5 Final > Reporter: Dimitris Andreadis > Assigned To: Dimitris Andreadis > Priority: Critical > Fix For: JBossAS-4.2.0.CR1, JBossAS-4.0.5.SP1 , JBossAS-3.2.8.SP2, JBossAS-5.0.0.Beta1 > > > Symantec discovered a flaw in the DeploymentFileRepository > class of the JBoss application server. A remote attacker who > is able to access the console manager could read or write to > files with the permissions of the JBoss user. This could > potentially lead to arbitrary code execution as the JBoss > user. (CVE-2006-5750) > Please note that the JBoss console manager should always be > secured prior to deployment. By default, the JBoss installer > gives users the ability to password protect the console > manager, limiting an attack using this vulnerability to > authorised users. These steps can also be performed manually. > http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss > This vulnerability afffects all JBoss releases from v3.2.4 to v.4.0.5 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Commented: (JBAOP-44) document new ARGS features

by Kabir Khan (JIRA)

[ http://jira.jboss.com/jira/browse/JBAOP-44?page=comments#action_12347706 ] Kabir Khan commented on JBAOP-44: --------------------------------- The docs for this are created using docbook - the "source" is in aop/docs/reference/reference. It is built from aop/docs/reference/build.xml > document new ARGS features > -------------------------- > > Key: JBAOP-44 > URL: http://jira.jboss.com/jira/browse/JBAOP-44 > Project: JBoss AOP > Issue Type: Task > Affects Versions: 2.0.0.alpha1 > Reporter: Bill Burke > Assigned To: Flavia Rainone > Fix For: 2.0.0.alpha3 > > > Document typed argument access within aspects as well as the CurrentInvocation class. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Assigned: (JBAOP-44) document new ARGS features

by Kabir Khan (JIRA)

[ http://jira.jboss.com/jira/browse/JBAOP-44?page=all ] Kabir Khan reassigned JBAOP-44: ------------------------------- Assignee: Flavia Rainone (was: Bill Burke) > document new ARGS features > -------------------------- > > Key: JBAOP-44 > URL: http://jira.jboss.com/jira/browse/JBAOP-44 > Project: JBoss AOP > Issue Type: Task > Affects Versions: 2.0.0.alpha1 > Reporter: Bill Burke > Assigned To: Flavia Rainone > Fix For: 2.0.0.alpha3 > > > Document typed argument access within aspects as well as the CurrentInvocation class. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Updated: (JBAS-3861) DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem

by Ryan Campbell (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-3861?page=all ] Ryan Campbell updated JBAS-3861: -------------------------------- Security: Public (was: JBoss Internal) > DeploymentFileRepository can be used to write/remove arbitrary files in the filesystem > -------------------------------------------------------------------------------------- > > Key: JBAS-3861 > URL: http://jira.jboss.com/jira/browse/JBAS-3861 > Project: JBoss Application Server > Issue Type: Bug > Security Level: Public(Everyone can see) > Components: Management services > Affects Versions: JBossAS-4.0.5.GA, JBossAS-4.0.4.GA, JBossAS-3.2.8.SP1, JBossAS-3.2.8 Final, JBossAS-4.0.3 Final, JBossAS-4.0.2 Final, JBossAS-4.0.1 SP1, JBossAS-4.0.1 Final, JBossAS-3.2.7 Final, JBossAS-3.2.6 Final, JBossAS-4.0.0 Final, JBossAS-3.2.5 Final > Reporter: Dimitris Andreadis > Assigned To: Dimitris Andreadis > Priority: Critical > Fix For: JBossAS-4.0.5.SP1 , JBossAS-5.0.0.Beta1, JBossAS-4.2.0.CR1, JBossAS-3.2.8.SP2 > > > Symantec discovered a flaw in the DeploymentFileRepository > class of the JBoss application server. A remote attacker who > is able to access the console manager could read or write to > files with the permissions of the JBoss user. This could > potentially lead to arbitrary code execution as the JBoss > user. (CVE-2006-5750) > Please note that the JBoss console manager should always be > secured prior to deployment. By default, the JBoss installer > gives users the ability to password protect the console > manager, limiting an attack using this vulnerability to > authorised users. These steps can also be performed manually. > http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss > This vulnerability afffects all JBoss releases from v3.2.4 to v.4.0.5 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Created: (JBAS-3879) org.jboss.resource.adapter.jdbc.WrappedConnection does not handle early rollbacks properly

by David Kilzer (JIRA)

org.jboss.resource.adapter.jdbc.WrappedConnection does not handle early rollbacks properly ------------------------------------------------------------------------------------------ Key: JBAS-3879 URL: http://jira.jboss.com/jira/browse/JBAS-3879 Project: JBoss Application Server Issue Type: Bug Security Level: Public (Everyone can see) Components: Management services Affects Versions: JBossAS-4.0.2 Final Environment: Microsoft Windows XP [Version 5.1.2600] java version "1.5.0_07" Java(TM) 2 Runtime Environment, Standard Edition (build 1.5.0_07-b03) Java HotSpot(TM) Client VM (build 1.5.0_07-b03, mixed mode) jTDS-1.2.0 MS SQL Server 2000 SP4 (separate server running WIndows 2003 Server) Reporter: David Kilzer Assigned To: Dimitris Andreadis When an "early" rollback is performed (see code example below) using a java.sql.Connection from a JBossAS-managed DataSource, the following stack trace is produced: java.sql.SQLException: rollback() should not be called while in auto-commit mode. at net.sourceforge.jtds.jdbc.ConnectionJDBC2.rollback(ConnectionJDBC2.java:1989) at org.jboss.resource.adapter.jdbc.BaseWrapperManagedConnection.jdbcRollback(BaseWrapperManagedConnection.java:535) at org.jboss.resource.adapter.jdbc.WrappedConnection.rollback(WrappedConnection.java:460) at package.MyClass.testWrappedConnectionBehavior(MyClass.java:71) [...] However, when this same code is run without using a JBossAS-managed DataSource, it works with no SQLException being thrown: private void testWrappedConnectionBehavior(DataSource dataSource) { Connection connection = null; try { connection = dataSource.getConnection(); connection.setAutoCommit(false); connection.rollback(); } catch (SQLException e) { e.printStackTrace(System.err); } finally { if (connection != null) { try { connection.close(); } catch (SQLException ignored) { } } } } The org.jboss.resource.adapter.jdbc.WrappedConnection class should be able to handle an early rollback properly. This issue originally filed with Spring: http://opensource.atlassian.com/projects/spring/browse/SPR-2862 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

2
2
0 / 0

[JBoss JIRA] Commented: (JBAS-2447) Consider removing snapshot mode from http session replication

by Javid Jamae (JIRA)

[ http://jira.jboss.com/jira/browse/JBAS-2447?page=comments#action_12347695 ] Javid Jamae commented on JBAS-2447: ----------------------------------- Just thought I'd mention that the forum discussion says that the interval snapshot mode is *not* going to be deprecated after all, but this issue was already closed before that decision was made. > Consider removing snapshot mode from http session replication > ------------------------------------------------------------- > > Key: JBAS-2447 > URL: http://jira.jboss.com/jira/browse/JBAS-2447 > Project: JBoss Application Server > Issue Type: Task > Security Level: Public(Everyone can see) > Components: Web (Tomcat) service, Clustering > Reporter: Brian Stansberry > Assigned To: Brian Stansberry > Fix For: JBossAS-4.0.4RC1 > > > We should consider removing the "snapshot mode" configuration from session replication. Since we moved to using JBossCache, asynchronous replication can be achieved via REPL_ASYNC. Queuing can be achieved by using a replication queue in the cache. Message bundling at the JGroups level is also available. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
0
0 / 0

[JBoss JIRA] Created: (JBMESSAGING-623) Replace the jboss-common snapshot dependency with a tagged release

by Ovidiu Feodorov (JIRA)

Replace the jboss-common snapshot dependency with a tagged release ------------------------------------------------------------------ Key: JBMESSAGING-623 URL: http://jira.jboss.com/jira/browse/JBMESSAGING-623 Project: JBoss Messaging Issue Type: Task Components: Build System Affects Versions: 1.0.1.GA Reporter: Ovidiu Feodorov Assigned To: Ovidiu Feodorov Fix For: 1.0.2.CR1 -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
1
0 / 0

[JBoss JIRA] Created: (JBFORUMS-145) NPE while deleting forum

by Ryszard Kozmik (JIRA)

NPE while deleting forum ------------------------ Key: JBFORUMS-145 URL: http://jira.jboss.com/jira/browse/JBFORUMS-145 Project: JBoss Forums Issue Type: Bug Reporter: Ryszard Kozmik Assigned To: Ryszard Kozmik Priority: Minor Fix For: 1.0.0 Beta After confirming deletion of forum a NPE is thrown. -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://jira.jboss.com/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira

19 years, 8 months

1
1
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

jboss-jira November 2006