[JBoss JIRA] (JBIDE-24648) update target platform to include jetty 9.4.6 (CVE issue)
by Nick Boldt (JIRA)
[ https://issues.jboss.org/browse/JBIDE-24648?page=com.atlassian.jira.plugi... ]
Nick Boldt updated JBIDE-24648:
-------------------------------
Component/s: target-platform
upstream
> update target platform to include jetty 9.4.6 (CVE issue)
> ---------------------------------------------------------
>
> Key: JBIDE-24648
> URL: https://issues.jboss.org/browse/JBIDE-24648
> Project: Tools (JBoss Tools)
> Issue Type: Bug
> Components: target-platform, upstream
> Reporter: Nick Boldt
> Assignee: Nick Boldt
> Fix For: 4.5.0.AM2
>
>
> Fedora and RHEL have updated to Jetty 9.4.6 due to this CVE:
> * https://bugzilla.redhat.com/show_bug.cgi?id=1464158
> Currently, JBT/devstudio target platform includes Jetty 9.4.5, as that's what was in Oxygen.0.RC4.
> But we could move to a newer version if we want to have the same version in linux and in windows/OSX versions of JBT/devstudio.
> Affected manifest files (which require jetty bundles from *[9.4.0,9.5.0)*)
> * [1] ./jbosstools-aerogear/cordovasim/plugins/org.jboss.tools.cordovasim.eclipse/META-INF/MANIFEST.MF
> * [2] ./jbosstools-aerogear/cordovasim/plugins/org.jboss.tools.cordovasim/META-INF/MANIFEST.MF
> * [3] ./jbosstools-aerogear/cordovasim/tests/org.jboss.tools.cordovasim.eclipse.test/META-INF/MANIFEST.MF
> * [4] ./jbosstools-base/foundation/tests/org.jboss.tools.foundation.core.test/META-INF/MANIFEST.MF
> * [5] ./jbosstools-browsersim/plugins/org.jboss.tools.browsersim.ui/META-INF/MANIFEST.MF
> * [6] ./jbosstools-central/central/tests/org.jboss.tools.central.test/META-INF/MANIFEST.MF
> * [7] ./jbosstools-livereload/plugins/org.jboss.tools.livereload.core/META-INF/MANIFEST.MF
> * [8] ./jbosstools-livereload/tests/org.jboss.tools.livereload.test/META-INF/MANIFEST.MF
> * [9] ./jbosstools-server/jmx/tests/org.jboss.tools.jmx.jolokia.test/META-INF/MANIFEST.MF
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 9 months
[JBoss JIRA] (JBIDE-24076) NullPointerException in JaxrsApplicationCreationWizardPage.getWebxmlResource
by Jeff MAURY (JIRA)
[ https://issues.jboss.org/browse/JBIDE-24076?page=com.atlassian.jira.plugi... ]
Jeff MAURY commented on JBIDE-24076:
------------------------------------
[~dbocharov] can you close it or check with QE ?
> NullPointerException in JaxrsApplicationCreationWizardPage.getWebxmlResource
> ----------------------------------------------------------------------------
>
> Key: JBIDE-24076
> URL: https://issues.jboss.org/browse/JBIDE-24076
> Project: Tools (JBoss Tools)
> Issue Type: Bug
> Components: webservices
> Reporter: Automated Error Reporting Bot
> Assignee: Dmitrii Bocharov
> Fix For: 4.5.0.AM2
>
>
> The following problem was reported via the automated error reporting:
> Message: Unhandled event loop exception
> java.lang.NullPointerException: null
> at org.jboss.tools.ws.jaxrs.ui.wizards.JaxrsApplicationCreationWizardPage.getWebxmlResource(JaxrsApplicationCreationWizardPage.java:596)
> at org.jboss.tools.ws.jaxrs.ui.wizards.JaxrsApplicationCreationWizard.performFinish(JaxrsApplicationCreationWizard.java:84)
> at org.eclipse.jface.wizard.WizardDialog.finishPressed(WizardDialog.java:790)
> at org.eclipse.jface.wizard.WizardDialog.buttonPressed(WizardDialog.java:423)
> at org.eclipse.jface.dialogs.Dialog$2.widgetSelected(Dialog.java:618)
> at org.eclipse.swt.widgets.TypedListener.handleEvent(TypedListener.java:249)
> at org.eclipse.swt.widgets.EventTable.sendEvent(EventTable.java:84)
> Bundles:
> | org.eclipse.jface | 3.12.0.v20160518-1929 | 3.12.0.v20160518-1929 |
> | org.eclipse.swt | 3.105.1.v20160907-0248 | 3.105.1.v20160907-0248 |
> | org.jboss.tools.ws.jaxrs.ui | 1.9.1.v20160608-0648 | 1.9.2.v20160922-1835 |
> Operating Systems:
> | Linux | 3.13.0 | 3.13.0 |
> | Windows | 10.0.0 | 10.0.0 |
> The above information is a snapshot of the collected data. Visit https://aer.ctrlflow.com/redhat/reviewers/#!/problems/581152c0e4b00cfabf9... for the latest data.
> Thank you for your assistance.
> Your friendly error-reports-inbox.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 9 months
[JBoss JIRA] (JBIDE-24019) test failures in webservices
by Jeff MAURY (JIRA)
[ https://issues.jboss.org/browse/JBIDE-24019?page=com.atlassian.jira.plugi... ]
Jeff MAURY updated JBIDE-24019:
-------------------------------
Fix Version/s: 4.5.x
(was: 4.5.0.AM2)
> test failures in webservices
> ----------------------------
>
> Key: JBIDE-24019
> URL: https://issues.jboss.org/browse/JBIDE-24019
> Project: Tools (JBoss Tools)
> Issue Type: Bug
> Components: webservices
> Affects Versions: 4.5.0.AM1
> Reporter: Nick Boldt
> Assignee: Jeff MAURY
> Fix For: 4.5.x
>
> Attachments: .log, org.jboss.tools.ws.creation.core.test.JBossWSCreationCoreTestSuite.txt, org.jboss.tools.ws.creation.core.test.JBossWSCreationCoreTestSuite_v2.txt
>
>
> See https://jenkins.hosts.mwqe.eng.bos.redhat.com/hudson/view/DevStudio/view/...
> When I run the same build locally (`mvn clean install`), I get null pointers - and they're not all related to ancient JRE5 tests.
> See attached: [^org.jboss.tools.ws.creation.core.test.JBossWSCreationCoreTestSuite.txt]
> Running again now with {code}mvn clean install -Djbosstools.test.jre.5=${JAVA_HOME} -Djbosstools.test.jre.6=${JAVA_HOME} \
> -Djbosstools.test.jre.7=${JAVA_HOME} -Djbosstools.test.jre.8=${JAVA_HOME}{code}
> See attached: [^org.jboss.tools.ws.creation.core.test.JBossWSCreationCoreTestSuite_v2.txt] and [^.log]
> Could the problem be this?
> {code}!ENTRY org.eclipse.wst.common.project.facet.core 4 0 2017-02-28 11:14:37.082
> !MESSAGE Project facet wst.jsdt.web has not been defined. It is used in plugin org.eclipse.jst.server.core.
> {code}
> (Wondering if we ought to update the parent pom to have smart defaults for these jbosstools.test.jre.* variables. WDYT? see JBIDE-24020)
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 9 months
[JBoss JIRA] (JBIDE-24642) Please include sha256 checksums in announcements
by Jesper Skov (JIRA)
[ https://issues.jboss.org/browse/JBIDE-24642?page=com.atlassian.jira.plugi... ]
Jesper Skov commented on JBIDE-24642:
-------------------------------------
Including them on the download page would also be fine. This is what I see at e.g. eclipse.org and sonatype.org.
Anywhere that is hosted elsewhere/differently than the actual (possibly mirrored) files would suffice in my view.
Whichever makes it the simplest to do, but including the checksums at all three places would also work :)
Cheers!
> Please include sha256 checksums in announcements
> ------------------------------------------------
>
> Key: JBIDE-24642
> URL: https://issues.jboss.org/browse/JBIDE-24642
> Project: Tools (JBoss Tools)
> Issue Type: Feature Request
> Components: build, website
> Reporter: Jesper Skov
> Assignee: Nick Boldt
> Fix For: LATER
>
>
> I would like to be able to verify checksums on downloaded JBoss artifacts - both EAP and eclipse-related binaries.
> Or even better, verify a signature.
> Today, when I want to use a JBossTools release, I would download
> http://download.jboss.org/jbosstools/static/oxygen/development/updates/co...
> And my only opportunity to verify the file is by downloading the sha256 file that lies next to it:
> http://download.jboss.org/jbosstools/static/oxygen/development/updates/co...
> If a hacker manages to replace the updatesite archive with compromised files, I assume they will have the brains to also update the checksum file next to it.
> So the current checksum can really only be used to verify the integrity of the downloaded file.
> Not that its contents is untampered.
> If the jar-files in the archive were signed, it would be less of an issue...
> Signed artifacts would be best. But would probably take some effort to put in place.
> A simpler remedy would be to include the checksums in the announcement. This would give an additional factor of security for those who care about that.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
8 years, 9 months