[jira] [Commented] (FELIX-6196) Eclipse: Circular reference detected in bundle org.apache.felix.scr

2019-11-19 Thread Scott Lewis (Jira)


[ 
https://issues.apache.org/jira/browse/FELIX-6196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16977694#comment-16977694
 ] 

Scott Lewis commented on FELIX-6196:


There is this issue too for the same problem:  
https://issues.apache.org/jira/browse/FELIX-6190

 

 

> Eclipse: Circular reference detected in bundle org.apache.felix.scr
> ---
>
> Key: FELIX-6196
> URL: https://issues.apache.org/jira/browse/FELIX-6196
> Project: Felix
>  Issue Type: Bug
> Environment: Fedora 30
> Java 1.8
> Eclipse Platform I20191023-1810
> ECF SDK for Eclipse 3.14.6.v20191023-2006
>Reporter: Martin Coufal
>Priority: Major
> Attachments: reproduce.sh
>
>
> When I run Eclipse with 'org.eclipse.ecf.core.feature.group' bundle 
> installed, I hit this message right after start:
> "
> !ENTRY org.apache.felix.scr 4 0 2019-10-24 17:52:38.045
> !MESSAGE bundle org.apache.felix.scr:2.1.14.v20190123-1619 (23)Circular 
> reference detected trying to get service 
> \{org.osgi.service.remoteserviceadmin.EndpointEventListener, 
> org.osgi.service.remoteserviceadmin.RemoteServiceAdminListener}=\{service.id=84,
>  service.bundleid=260, service.scope=bundle, 
> component.name=org.eclipse.ecf.mgmt.rsa.discovery.ui.discovery, 
> component.id=50, endpoint.listener.scope=(ecf.endpoint.id.ns=*)}
> "
> I'm not sure if this is Felix specific issue, though...
>  
> How to reproduce:
> 1. have 'org.eclipse.ecf.core.feature.group' installed
> 2. run eclipse
> 3. see log
> I'm attaching reproduction script (destructive, run carefully!)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Commented] (FELIX-6196) Eclipse: Circular reference detected in bundle org.apache.felix.scr

2019-11-19 Thread Scott Lewis (Jira)


[ 
https://issues.apache.org/jira/browse/FELIX-6196?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16977689#comment-16977689
 ] 

Scott Lewis commented on FELIX-6196:


Hi Martin.   I don't think this was a bug in Eclipse.   I personally modified 
the ECF RSA impl to *work around* this issue in ECF 3.14.6.   I didn't fix the 
underlying problem, but just changed the ECF code to not use SCR at all for the 
event hook registration and so avoid the problem in SCR.

I suggest reopening or cloning this issue so that at least it doesn't seem as 
if the underlying problem in SCR has been addressed.  Note that to reproduce, 
it's necessary to use ECF 3.14.5, which does use SCR to register the Event hook 
callback.

 

 

> Eclipse: Circular reference detected in bundle org.apache.felix.scr
> ---
>
> Key: FELIX-6196
> URL: https://issues.apache.org/jira/browse/FELIX-6196
> Project: Felix
>  Issue Type: Bug
> Environment: Fedora 30
> Java 1.8
> Eclipse Platform I20191023-1810
> ECF SDK for Eclipse 3.14.6.v20191023-2006
>Reporter: Martin Coufal
>Priority: Major
> Attachments: reproduce.sh
>
>
> When I run Eclipse with 'org.eclipse.ecf.core.feature.group' bundle 
> installed, I hit this message right after start:
> "
> !ENTRY org.apache.felix.scr 4 0 2019-10-24 17:52:38.045
> !MESSAGE bundle org.apache.felix.scr:2.1.14.v20190123-1619 (23)Circular 
> reference detected trying to get service 
> \{org.osgi.service.remoteserviceadmin.EndpointEventListener, 
> org.osgi.service.remoteserviceadmin.RemoteServiceAdminListener}=\{service.id=84,
>  service.bundleid=260, service.scope=bundle, 
> component.name=org.eclipse.ecf.mgmt.rsa.discovery.ui.discovery, 
> component.id=50, endpoint.listener.scope=(ecf.endpoint.id.ns=*)}
> "
> I'm not sure if this is Felix specific issue, though...
>  
> How to reproduce:
> 1. have 'org.eclipse.ecf.core.feature.group' installed
> 2. run eclipse
> 3. see log
> I'm attaching reproduction script (destructive, run carefully!)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread David Jencks
+1

David Jencks

> On Nov 19, 2019, at 1:11 AM, Karl Pauls  wrote:
> 
> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
> 
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
> 
> Please vote to approve this move:
> 
>  [ ] +1 Move source control to gitbox
>  [ ]  0 Don't care
>  [ ] -1 Don't, because ...



Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Richard Hall
+1


On Tue, Nov 19, 2019, 04:11 Karl Pauls  wrote:

> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
>
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
>
> Please vote to approve this move:
>
>   [ ] +1 Move source control to gitbox
>   [ ]  0 Don't care
>   [ ] -1 Don't, because ...
>


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Thomas Watson
+1

On Tue, Nov 19, 2019 at 3:11 AM Karl Pauls  wrote:

> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
>
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
>
> Please vote to approve this move:
>
>   [ ] +1 Move source control to gitbox
>   [ ]  0 Don't care
>   [ ] -1 Don't, because ...
>


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Raymond Auge
+1

- Ray

On Tue, Nov 19, 2019, 05:26 Jean-Baptiste Onofré,  wrote:

> +1
>
> Regards
> JB
>
> On 19/11/2019 10:11, Karl Pauls wrote:
> > Following up on the discussion about moving Felix to git I'd like to
> > call for a vote now.
> >
> > The idea is to ask Infra to move the current svn to gitbox
> > (https://gitbox.apache.org) which will give us a two-master setup of
> > git repositories, allowing committers to utilize two different avenues
> > of committing code; through GitHub or through the ASF (gitbox) -
> > including the ability to work with pull requests on github directly.
> >
> > Please vote to approve this move:
> >
> >   [ ] +1 Move source control to gitbox
> >   [ ]  0 Don't care
> >   [ ] -1 Don't, because ...
> >
>
> --
> Jean-Baptiste Onofré
> jbono...@apache.org
> http://blog.nanthrax.net
> Talend - http://www.talend.com
>


[jira] [Commented] (FELIX-6185) jQuery <3.4.0 is vulnerable to prototype pollution attacks

2019-11-19 Thread Colm O hEigeartaigh (Jira)


[ 
https://issues.apache.org/jira/browse/FELIX-6185?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16977416#comment-16977416
 ] 

Colm O hEigeartaigh commented on FELIX-6185:


[~cziegeler] - I think the fix for version should be webconsole-4.3.17 above? 
Can we get a release out that includes this fix?

> jQuery <3.4.0 is vulnerable to prototype pollution attacks
> --
>
> Key: FELIX-6185
> URL: https://issues.apache.org/jira/browse/FELIX-6185
> Project: Felix
>  Issue Type: Bug
>  Components: Web Console
>Affects Versions: webconsole-4.3.16
>Reporter: Dale Clarke
>Assignee: Carsten Ziegeler
>Priority: Minor
>  Labels: security
> Fix For: webconsole-4.3.18
>
>
> jQuery prior to version 3.4.0 was vulnerable to prototype pollution 
> (https://snyk.io/test/npm/jquery/3.3.1).  The webconsole currently uses 
> jQuery 3.3.1.  jQuery >= 3.4.0 addresses this issues 
> ([https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/).]  I'd propose 
> upgrading to jQuery 3.4.1 and jQuery migrate from 3.0.0 to 3.1.0 to address 
> this issue.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Closed] (FELIX-6196) Eclipse: Circular reference detected in bundle org.apache.felix.scr

2019-11-19 Thread Martin Coufal (Jira)


 [ 
https://issues.apache.org/jira/browse/FELIX-6196?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Martin Coufal closed FELIX-6196.

Resolution: Invalid

I can't see the issue anymore, probably bug in Eclipse after all...

> Eclipse: Circular reference detected in bundle org.apache.felix.scr
> ---
>
> Key: FELIX-6196
> URL: https://issues.apache.org/jira/browse/FELIX-6196
> Project: Felix
>  Issue Type: Bug
> Environment: Fedora 30
> Java 1.8
> Eclipse Platform I20191023-1810
> ECF SDK for Eclipse 3.14.6.v20191023-2006
>Reporter: Martin Coufal
>Priority: Major
> Attachments: reproduce.sh
>
>
> When I run Eclipse with 'org.eclipse.ecf.core.feature.group' bundle 
> installed, I hit this message right after start:
> "
> !ENTRY org.apache.felix.scr 4 0 2019-10-24 17:52:38.045
> !MESSAGE bundle org.apache.felix.scr:2.1.14.v20190123-1619 (23)Circular 
> reference detected trying to get service 
> \{org.osgi.service.remoteserviceadmin.EndpointEventListener, 
> org.osgi.service.remoteserviceadmin.RemoteServiceAdminListener}=\{service.id=84,
>  service.bundleid=260, service.scope=bundle, 
> component.name=org.eclipse.ecf.mgmt.rsa.discovery.ui.discovery, 
> component.id=50, endpoint.listener.scope=(ecf.endpoint.id.ns=*)}
> "
> I'm not sure if this is Felix specific issue, though...
>  
> How to reproduce:
> 1. have 'org.eclipse.ecf.core.feature.group' installed
> 2. run eclipse
> 3. see log
> I'm attaching reproduction script (destructive, run carefully!)



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Jean-Baptiste Onofré
+1

Regards
JB

On 19/11/2019 10:11, Karl Pauls wrote:
> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
> 
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
> 
> Please vote to approve this move:
> 
>   [ ] +1 Move source control to gitbox
>   [ ]  0 Don't care
>   [ ] -1 Don't, because ...
> 

-- 
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Pierre De Rop
+1

regards
pierre

On Tue, Nov 19, 2019 at 10:27 AM David Bosschaert <
david.bosscha...@gmail.com> wrote:

> +1
>
> David
>
> On Tue, 19 Nov 2019 at 09:11, Karl Pauls  wrote:
>
> > Following up on the discussion about moving Felix to git I'd like to
> > call for a vote now.
> >
> > The idea is to ask Infra to move the current svn to gitbox
> > (https://gitbox.apache.org) which will give us a two-master setup of
> > git repositories, allowing committers to utilize two different avenues
> > of committing code; through GitHub or through the ASF (gitbox) -
> > including the ability to work with pull requests on github directly.
> >
> > Please vote to approve this move:
> >
> >   [ ] +1 Move source control to gitbox
> >   [ ]  0 Don't care
> >   [ ] -1 Don't, because ...
> >
>


Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread David Bosschaert
+1

David

On Tue, 19 Nov 2019 at 09:11, Karl Pauls  wrote:

> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
>
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
>
> Please vote to approve this move:
>
>   [ ] +1 Move source control to gitbox
>   [ ]  0 Don't care
>   [ ] -1 Don't, because ...
>


RE: [VOTE] Move Felix to git(box)

2019-11-19 Thread Stefan Seifert
+1 (non-binding)



Re: [VOTE] Move Felix to git(box)

2019-11-19 Thread Guillaume Nodet
+1

Le mar. 19 nov. 2019 à 10:11, Karl Pauls  a écrit :

> Following up on the discussion about moving Felix to git I'd like to
> call for a vote now.
>
> The idea is to ask Infra to move the current svn to gitbox
> (https://gitbox.apache.org) which will give us a two-master setup of
> git repositories, allowing committers to utilize two different avenues
> of committing code; through GitHub or through the ASF (gitbox) -
> including the ability to work with pull requests on github directly.
>
> Please vote to approve this move:
>
>   [ ] +1 Move source control to gitbox
>   [ ]  0 Don't care
>   [ ] -1 Don't, because ...
>


-- 

Guillaume Nodet


RE: [VOTE] Move Felix to git(box)

2019-11-19 Thread Rob Walker
+1

-Rob

-Original Message-
From: Karl Pauls  
Sent: 19 November 2019 09:11
To: dev@felix.apache.org
Subject: [VOTE] Move Felix to git(box)

Following up on the discussion about moving Felix to git I'd like to call for a 
vote now.

The idea is to ask Infra to move the current svn to gitbox
(https://gitbox.apache.org) which will give us a two-master setup of git 
repositories, allowing committers to utilize two different avenues of 
committing code; through GitHub or through the ASF (gitbox) - including the 
ability to work with pull requests on github directly.

Please vote to approve this move:

  [ ] +1 Move source control to gitbox
  [ ]  0 Don't care
  [ ] -1 Don't, because ...


[VOTE] Move Felix to git(box)

2019-11-19 Thread Karl Pauls
Following up on the discussion about moving Felix to git I'd like to
call for a vote now.

The idea is to ask Infra to move the current svn to gitbox
(https://gitbox.apache.org) which will give us a two-master setup of
git repositories, allowing committers to utilize two different avenues
of committing code; through GitHub or through the ASF (gitbox) -
including the ability to work with pull requests on github directly.

Please vote to approve this move:

  [ ] +1 Move source control to gitbox
  [ ]  0 Don't care
  [ ] -1 Don't, because ...