[VOTE] Release of Extensions Validator 2.0.8
Hi, we were running the needed tasks to get the 8th release of Apache MyFaces Extensions Validator out. The artifacts are deployed to Nexus [1]. The release contains the following modules for JSF 2.x: - ExtVal Core - ExtVal Property-Validation - ExtVal Bean-Validation - Trinidad-Support-Module - Generic-Support-Module Please take a look at the 2.0.8 artifacts and vote! Please note: This vote is majority approval with a minimum of three +1 votes (see [2]). [ ] +1 for community members who have reviewed the bits [ ] +0 [ ] -1 for fatal flaws that should cause these bits not to be released, and why.. Thanks, Gerhard [1] https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/ [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
Re: [VOTE] Release of Extensions Validator 2.0.8
+1 regards, gerhard 2014-05-27 8:29 GMT+02:00 Gerhard Petracek gpetra...@apache.org: Hi, we were running the needed tasks to get the 8th release of Apache MyFaces Extensions Validator out. The artifacts are deployed to Nexus [1]. The release contains the following modules for JSF 2.x: - ExtVal Core - ExtVal Property-Validation - ExtVal Bean-Validation - Trinidad-Support-Module - Generic-Support-Module Please take a look at the 2.0.8 artifacts and vote! Please note: This vote is majority approval with a minimum of three +1 votes (see [2]). [ ] +1 for community members who have reviewed the bits [ ] +0 [ ] -1 for fatal flaws that should cause these bits not to be released, and why.. Thanks, Gerhard [1] https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/ [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
[jira] [Commented] (TRINIDAD-2476) MApplication.java needs to override subscribeToEvent
[ https://issues.apache.org/jira/browse/TRINIDAD-2476?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14009650#comment-14009650 ] Andy Schwartz commented on TRINIDAD-2476: - Committed fix in r1597776. Thanks Kevin. MApplication.java needs to override subscribeToEvent Key: TRINIDAD-2476 URL: https://issues.apache.org/jira/browse/TRINIDAD-2476 Project: MyFaces Trinidad Issue Type: Improvement Reporter: Kevin Jackson Fix For: 2.1.1-core Attachments: MApplication.java.diff, trinidad-2476-take2.patch The ADF unit tests fails with JSF 2.2 without override of subscribeToEvent -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Updated] (TRINIDAD-2476) MApplication.java needs to override subscribeToEvent
[ https://issues.apache.org/jira/browse/TRINIDAD-2476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andy Schwartz updated TRINIDAD-2476: Resolution: Fixed Fix Version/s: 2.1.1-core Assignee: Andy Schwartz Status: Resolved (was: Patch Available) MApplication.java needs to override subscribeToEvent Key: TRINIDAD-2476 URL: https://issues.apache.org/jira/browse/TRINIDAD-2476 Project: MyFaces Trinidad Issue Type: Improvement Reporter: Kevin Jackson Assignee: Andy Schwartz Fix For: 2.1.1-core Attachments: MApplication.java.diff, trinidad-2476-take2.patch The ADF unit tests fails with JSF 2.2 without override of subscribeToEvent -- This message was sent by Atlassian JIRA (v6.2#6252)
Re: [VOTE] Release of Extensions Validator 2.0.8
+1 Werner Am 27.05.14 10:14, schrieb Gerhard Petracek: +1 regards, gerhard 2014-05-27 8:29 GMT+02:00 Gerhard Petracek gpetra...@apache.org mailto:gpetra...@apache.org: Hi, we were running the needed tasks to get the 8th release of Apache MyFaces Extensions Validator out. The artifacts are deployed to Nexus [1]. The release contains the following modules for JSF 2.x: - ExtVal Core - ExtVal Property-Validation - ExtVal Bean-Validation - Trinidad-Support-Module - Generic-Support-Module Please take a look at the 2.0.8 artifacts and vote! Please note: This vote is majority approval with a minimum of three +1 votes (see [2]). [ ] +1 for community members who have reviewed the bits [ ] +0 [ ] -1 for fatal flaws that should cause these bits not to be released, and why.. Thanks, Gerhard [1] https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/ [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
[jira] [Commented] (TOBAGO-1367) Remove debugMode from ClientProperties
[ https://issues.apache.org/jira/browse/TOBAGO-1367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14010134#comment-14010134 ] Hudson commented on TOBAGO-1367: SUCCESS: Integrated in tobago-1.5.x #202 (See [https://builds.apache.org/job/tobago-1.5.x/202/]) TOBAGO-1367: Remove debugMode from ClientProperties (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1583657) * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/context/ClientProperties.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/java/org/apache/myfaces/tobago/example/demo/clientConfig/ClientConfigController.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tags/layout/overview.tag * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tags/layout/overview.xhtml * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/content/10-locale/locale.xhtml * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/ClientConfigController.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/DebugModePhaseListener.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/webapp/WEB-INF/faces-config.xml * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/PageRenderer.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago.properties.xml * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago_de.properties.xml * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago_es.properties.xml Remove debugMode from ClientProperties -- Key: TOBAGO-1367 URL: https://issues.apache.org/jira/browse/TOBAGO-1367 Project: MyFaces Tobago Issue Type: Task Reporter: Udo Schnurpfeil Assignee: Udo Schnurpfeil Priority: Minor Fix For: 2.0.0-beta-3, 1.5.14, 2.0.0, 3.0.0-alpha-1, 3.0.0 This attribute is no longer needed, we handle the suff over the ProjectStage from JSF. (for 1.5.14 and 2.0.0-beta-3 I set it to deprecated) -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Commented] (TOBAGO-1382) New attribute name for tc:object
[ https://issues.apache.org/jira/browse/TOBAGO-1382?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14010136#comment-14010136 ] Hudson commented on TOBAGO-1382: SUCCESS: Integrated in tobago-1.5.x #202 (See [https://builds.apache.org/job/tobago-1.5.x/202/]) TOBAGO-1382: New attribute name for tc:object (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1583332) * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/taglib/component/ObjectTagDeclaration.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/webapp/navigation.xhtml * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/ObjectRenderer.java New attribute name for tc:object Key: TOBAGO-1382 URL: https://issues.apache.org/jira/browse/TOBAGO-1382 Project: MyFaces Tobago Issue Type: Improvement Components: Core, Themes Affects Versions: 1.0.41, 1.5.13, 2.0.0-beta-2 Reporter: Udo Schnurpfeil Assignee: Udo Schnurpfeil Fix For: 2.0.0-beta-3, 1.0.42, 1.5.14, 2.0.0, 3.0.0 The name attribute of the rendered iframe will use the clientId. The clientId usually contains a colon :, but this doesn't work well in JavaScript window.open(src, target) in Internet Explorer 9 and lower. -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Commented] (TOBAGO-1381) Radio- and Checkbox-Renderer may produce an NullPointerException
[ https://issues.apache.org/jira/browse/TOBAGO-1381?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14010137#comment-14010137 ] Hudson commented on TOBAGO-1381: SUCCESS: Integrated in tobago-1.5.x #202 (See [https://builds.apache.org/job/tobago-1.5.x/202/]) TOBAGO-1381: Radio- and Checkbox-Renderer may produce an NullPointerException (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1583275) * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/util/ComponentUtils.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/java/org/apache/myfaces/tobago/example/demo/clientConfig/ClientConfigController.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/ClientConfigController.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/MenuCommandRenderer.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/SelectManyCheckboxRenderer.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/SelectOneRadioRenderer.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/ToolBarRendererBase.java Radio- and Checkbox-Renderer may produce an NullPointerException Key: TOBAGO-1381 URL: https://issues.apache.org/jira/browse/TOBAGO-1381 Project: MyFaces Tobago Issue Type: Bug Components: Themes Affects Versions: 1.0.41, 1.5.13, 2.0.0-beta-2 Reporter: Udo Schnurpfeil Assignee: Udo Schnurpfeil Fix For: 2.0.0-beta-3, 1.0.42, 1.5.14, 2.0.0 -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Commented] (TOBAGO-1364) CVE-2014-0050 Apache Commons FileUpload DoS
[ https://issues.apache.org/jira/browse/TOBAGO-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14010135#comment-14010135 ] Hudson commented on TOBAGO-1364: SUCCESS: Integrated in tobago-1.5.x #202 (See [https://builds.apache.org/job/tobago-1.5.x/202/]) TOBAGO-1364: CVE-2014-0050 Apache Commons FileUpload DoS (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1566691) * /myfaces/tobago/branches/tobago-1.5.x/pom.xml CVE-2014-0050 Apache Commons FileUpload DoS --- Key: TOBAGO-1364 URL: https://issues.apache.org/jira/browse/TOBAGO-1364 Project: MyFaces Tobago Issue Type: Bug Components: Core Affects Versions: 1.0.40, 2.0.0-alpha-3, 1.5.12 Reporter: Dennis Kieselhorst Assignee: Udo Schnurpfeil Priority: Critical Fix For: 1.0.41, 1.5.13, 2.0.0-beta-1, 2.0.0 Attachments: TOBAGO-1364.patch Specially crafted input can trigger a DoS if the buffer used by the MultipartStream is not big enough. The commons-fileupload dependency must be updated to 1.3.1 to fix this. - Original-Nachricht Betreff: [SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS Datum: Thu, 06 Feb 2014 11:37:32 + Von: Mark Thomas ma...@apache.org An: Commons Users List u...@commons.apache.org, Tomcat Users List us...@tomcat.apache.org Kopie (CC): Commons Developers List d...@commons.apache.org, Tomcat Developers List d...@tomcat.apache.org, full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com, annou...@apache.org, annou...@tomcat.apache.org CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS Severity: Important Vendor: The Apache Software Foundation Versions Affected: - - Commons FileUpload 1.0 to 1.3 - - Apache Tomcat 8.0.0-RC1 to 8.0.1 - - Apache Tomcat 7.0.0 to 7.0.50 - - Apache Tomcat 6 and earlier are not affected Apache Tomcat 7 and Apache Tomcat 8 use a packaged renamed copy of Apache Commons FileUpload to implement the requirement of the Servlet 3.0 and later specifications to support the processing of mime-multipart requests. Tomcat 7 and 8 are therefore affected by this issue. While Tomcat 6 uses Commons FileUpload as part of the Manager application, access to that functionality is limited to authenticated administrators. Description: It is possible to craft a malformed Content-Type header for a multipart request that causes Apache Commons FileUpload to enter an infinite loop. A malicious user could, therefore, craft a malformed request that triggered a denial of service. This issue was reported responsibly to the Apache Software Foundation via JPCERT but an error in addressing an e-mail led to the unintended early disclosure of this issue[1]. Mitigation: Users of affected versions should apply one of the following mitigations - - Upgrade to Apache Commons FileUpload 1.3.1 or later once released - - Upgrade to Apache Tomcat 8.0.2 or later once released - - Upgrade to Apache Tomcat 7.0.51 or later once released - - Apply the appropriate patch - Commons FileUpload: http://svn.apache.org/r1565143 - Tomcat 8: http://svn.apache.org/r1565163 - Tomcat 7: http://svn.apache.org/r1565169 - - Limit the size of the Content-Type header to less than 4091 bytes Credit: This issue was reported to the Apache Software Foundation via JPCERT. References: [1] http://markmail.org/message/kpfl7ax4el2owb3o [2] http://tomcat.apache.org/security-8.html [3] http://tomcat.apache.org/security-7.html -- This message was sent by Atlassian JIRA (v6.2#6252)
[jira] [Commented] (TOBAGO-1374) link attribute contains faces mapping
[ https://issues.apache.org/jira/browse/TOBAGO-1374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanelfocusedCommentId=14010133#comment-14010133 ] Hudson commented on TOBAGO-1374: SUCCESS: Integrated in tobago-1.5.x #202 (See [https://builds.apache.org/job/tobago-1.5.x/202/]) TOBAGO-1374: link attribute contains faces mapping - ensure there is at least one character as protocol name (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1578290) * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/StringUtils.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/test/java/org/apache/myfaces/tobago/internal/util/StringUtilsUnitTest.java TOBAGO-1374: link attribute contains faces mapping (lofwyr: http://svn.apache.org/viewvc/?view=revrev=1577669) * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/taglib/declaration/HasLink.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/StringUtils.java * /myfaces/tobago/branches/tobago-1.5.x/tobago-example/pom.xml * /myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-standard/src/main/java/org/apache/myfaces/tobago/renderkit/html/util/CommandRendererHelper.java link attribute contains faces mapping - Key: TOBAGO-1374 URL: https://issues.apache.org/jira/browse/TOBAGO-1374 Project: MyFaces Tobago Issue Type: Bug Affects Versions: 1.0.40, 1.5.12 Reporter: Bernd Bohmann Assignee: Udo Schnurpfeil Fix For: 1.0.41, 1.5.13, 2.0.0-beta-1, 2.0.0 Link contains the faces mapping. The description says only session id and optional context path. Encode action url is called. I think this is wrong. Link to an arbitrary URL, either an internal link or an external link. internal absolute link Starts with a slash '/' character. The context path will be added. A session id will be added, if needed. external link Contains a colon ':' character. The link will not be modified. internal relative link Any other strings. A session id will be added, if needed. Type: java.lang.String -- This message was sent by Atlassian JIRA (v6.2#6252)
Re: [VOTE] Release of Extensions Validator 2.0.8
+1 Sent from my iPhone On May 27, 2014, at 8:19 PM, Werner Punz werner.p...@gmail.com wrote: +1 Werner Am 27.05.14 10:14, schrieb Gerhard Petracek: +1 regards, gerhard 2014-05-27 8:29 GMT+02:00 Gerhard Petracek gpetra...@apache.org mailto:gpetra...@apache.org: Hi, we were running the needed tasks to get the 8th release of Apache MyFaces Extensions Validator out. The artifacts are deployed to Nexus [1]. The release contains the following modules for JSF 2.x: - ExtVal Core - ExtVal Property-Validation - ExtVal Bean-Validation - Trinidad-Support-Module - Generic-Support-Module Please take a look at the 2.0.8 artifacts and vote! Please note: This vote is majority approval with a minimum of three +1 votes (see [2]). [ ] +1 for community members who have reviewed the bits [ ] +0 [ ] -1 for fatal flaws that should cause these bits not to be released, and why.. Thanks, Gerhard [1] https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/ [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
