Re: [VOTE] Release of Extensions Validator 2.0.8

[Hazem Saleh]

+1

Sent from my iPhone

> On May 27, 2014, at 8:19 PM, Werner Punz  wrote:
> 
> +1
> 
> Werner
> 
> 
> Am 27.05.14 10:14, schrieb Gerhard Petracek:
>> +1
>> 
>> regards,
>> gerhard
>> 
>> 
>> 
>> 2014-05-27 8:29 GMT+02:00 Gerhard Petracek > >:
>> 
>>Hi,
>> 
>>we were running the needed tasks to get the 8th release of Apache
>>MyFaces Extensions Validator out.
>>The artifacts are deployed to Nexus [1].
>> 
>>The release contains the following modules for JSF 2.x:
>>  - ExtVal Core
>>  - ExtVal Property-Validation
>>  - ExtVal Bean-Validation
>>  - Trinidad-Support-Module
>>  - Generic-Support-Module
>> 
>>Please take a look at the 2.0.8 artifacts and vote!
>> 
>>Please note:
>>This vote is "majority approval" with a minimum of three +1 votes
>>(see [2]).
>> 
>>
>>[ ] +1 for community members who have reviewed the bits
>>[ ] +0
>>[ ] -1 for fatal flaws that should cause these bits not to be
>>released, and why..
>>
>> 
>>Thanks,
>>Gerhard
>> 
>>[1]
>>
>> https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/
>>[2] http://www.apache.org/foundation/voting.html#ReleaseVotes
> 
> 

[jira] [Commented] (TOBAGO-1374) link attribute contains faces mapping

[Hudson (JIRA)]

[ 
https://issues.apache.org/jira/browse/TOBAGO-1374?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14010133#comment-14010133
 ] 

Hudson commented on TOBAGO-1374:


SUCCESS: Integrated in tobago-1.5.x #202 (See 
[https://builds.apache.org/job/tobago-1.5.x/202/])
TOBAGO-1374: link attribute contains faces mapping
 - ensure there is at least one character as protocol name (lofwyr: 
http://svn.apache.org/viewvc/?view=rev&rev=1578290)
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/StringUtils.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/test/java/org/apache/myfaces/tobago/internal/util/StringUtilsUnitTest.java
TOBAGO-1374: link attribute contains faces mapping (lofwyr: 
http://svn.apache.org/viewvc/?view=rev&rev=1577669)
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/taglib/declaration/HasLink.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/util/StringUtils.java
* /myfaces/tobago/branches/tobago-1.5.x/tobago-example/pom.xml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-standard/src/main/java/org/apache/myfaces/tobago/renderkit/html/util/CommandRendererHelper.java


> link attribute contains faces mapping
> -
>
> Key: TOBAGO-1374
> URL: https://issues.apache.org/jira/browse/TOBAGO-1374
> Project: MyFaces Tobago
>  Issue Type: Bug
>Affects Versions: 1.0.40, 1.5.12
>Reporter: Bernd Bohmann
>Assignee: Udo Schnurpfeil
> Fix For: 1.0.41, 1.5.13, 2.0.0-beta-1, 2.0.0
>
>
> Link contains the faces mapping. The description says only session id and 
> optional context path. Encode action url is called. I think this is wrong.
> Link to an arbitrary URL, either an internal link or an external link.
> internal absolute link
> Starts with a slash '/' character. The context path will be added. A session 
> id will be added, if needed.
> external link
> Contains a colon ':' character. The link will not be modified.
> internal relative link
> Any other strings. A session id will be added, if needed.
> Type: java.lang.String



--
This message was sent by Atlassian JIRA
(v6.2#6252)

[jira] [Commented] (TOBAGO-1381) Radio- and Checkbox-Renderer may produce an NullPointerException

[Hudson (JIRA)]

[ 
https://issues.apache.org/jira/browse/TOBAGO-1381?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14010137#comment-14010137
 ] 

Hudson commented on TOBAGO-1381:


SUCCESS: Integrated in tobago-1.5.x #202 (See 
[https://builds.apache.org/job/tobago-1.5.x/202/])
TOBAGO-1381: Radio- and Checkbox-Renderer may produce an NullPointerException 
(lofwyr: http://svn.apache.org/viewvc/?view=rev&rev=1583275)
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/util/ComponentUtils.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/java/org/apache/myfaces/tobago/example/demo/clientConfig/ClientConfigController.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/ClientConfigController.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/MenuCommandRenderer.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/SelectManyCheckboxRenderer.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/SelectOneRadioRenderer.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/ToolBarRendererBase.java


> Radio- and Checkbox-Renderer may produce an NullPointerException
> 
>
> Key: TOBAGO-1381
> URL: https://issues.apache.org/jira/browse/TOBAGO-1381
> Project: MyFaces Tobago
>  Issue Type: Bug
>  Components: Themes
>Affects Versions: 1.0.41, 1.5.13, 2.0.0-beta-2
>Reporter: Udo Schnurpfeil
>Assignee: Udo Schnurpfeil
> Fix For: 2.0.0-beta-3, 1.0.42, 1.5.14, 2.0.0
>
>




--
This message was sent by Atlassian JIRA
(v6.2#6252)

[jira] [Commented] (TOBAGO-1364) CVE-2014-0050 Apache Commons FileUpload DoS

[Hudson (JIRA)]

[ 
https://issues.apache.org/jira/browse/TOBAGO-1364?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14010135#comment-14010135
 ] 

Hudson commented on TOBAGO-1364:


SUCCESS: Integrated in tobago-1.5.x #202 (See 
[https://builds.apache.org/job/tobago-1.5.x/202/])
TOBAGO-1364: CVE-2014-0050 Apache Commons FileUpload DoS (lofwyr: 
http://svn.apache.org/viewvc/?view=rev&rev=1566691)
* /myfaces/tobago/branches/tobago-1.5.x/pom.xml


> CVE-2014-0050 Apache Commons FileUpload DoS
> ---
>
> Key: TOBAGO-1364
> URL: https://issues.apache.org/jira/browse/TOBAGO-1364
> Project: MyFaces Tobago
>  Issue Type: Bug
>  Components: Core
>Affects Versions: 1.0.40, 2.0.0-alpha-3, 1.5.12
>Reporter: Dennis Kieselhorst
>Assignee: Udo Schnurpfeil
>Priority: Critical
> Fix For: 1.0.41, 1.5.13, 2.0.0-beta-1, 2.0.0
>
> Attachments: TOBAGO-1364.patch
>
>
> Specially crafted input can trigger a DoS if the buffer used by the 
> MultipartStream is not big enough. The commons-fileupload dependency must be 
> updated to 1.3.1 to fix this.
> -  Original-Nachricht 
> Betreff: [SECURITY] CVE-2014-0050 Apache Commons FileUpload and
> Apache Tomcat DoS
> Datum: Thu, 06 Feb 2014 11:37:32 +
> Von: Mark Thomas 
> An: Commons Users List , Tomcat Users List
> 
> Kopie (CC): Commons Developers List , Tomcat
> Developers List ,
> full-disclos...@lists.grok.org.uk, bugt...@securityfocus.com,
> annou...@apache.org, annou...@tomcat.apache.org
> CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS
> Severity: Important
> Vendor: The Apache Software Foundation
> Versions Affected:
> - - Commons FileUpload 1.0 to 1.3
> - - Apache Tomcat 8.0.0-RC1 to 8.0.1
> - - Apache Tomcat 7.0.0 to 7.0.50
> - - Apache Tomcat 6 and earlier are not affected
> Apache Tomcat 7 and Apache Tomcat 8 use a packaged renamed copy of
> Apache Commons FileUpload to implement the requirement of the Servlet
> 3.0 and later specifications to support the processing of
> mime-multipart requests. Tomcat 7 and 8 are therefore affected by this
> issue. While Tomcat 6 uses Commons FileUpload as part of the Manager
> application, access to that functionality is limited to authenticated
> administrators.
> Description:
> It is possible to craft a malformed Content-Type header for a
> multipart request that causes Apache Commons FileUpload to enter an
> infinite loop. A malicious user could, therefore, craft a malformed
> request that triggered a denial of service.
> This issue was reported responsibly to the Apache Software Foundation
> via JPCERT but an error in addressing an e-mail led to the unintended
> early disclosure of this issue[1].
> Mitigation:
> Users of affected versions should apply one of the following mitigations
> - - Upgrade to Apache Commons FileUpload 1.3.1 or later once released
> - - Upgrade to Apache Tomcat 8.0.2 or later once released
> - - Upgrade to Apache Tomcat 7.0.51 or later once released
> - - Apply the appropriate patch
>   - Commons FileUpload: http://svn.apache.org/r1565143
>   - Tomcat 8: http://svn.apache.org/r1565163
>   - Tomcat 7: http://svn.apache.org/r1565169
> - - Limit the size of the Content-Type header to less than 4091 bytes
> Credit:
> This issue was reported to the Apache Software Foundation via JPCERT.
> References:
> [1] http://markmail.org/message/kpfl7ax4el2owb3o
> [2] http://tomcat.apache.org/security-8.html
> [3] http://tomcat.apache.org/security-7.html



--
This message was sent by Atlassian JIRA
(v6.2#6252)

[jira] [Commented] (TOBAGO-1367) Remove debugMode from ClientProperties

[Hudson (JIRA)]

[ 
https://issues.apache.org/jira/browse/TOBAGO-1367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14010134#comment-14010134
 ] 

Hudson commented on TOBAGO-1367:


SUCCESS: Integrated in tobago-1.5.x #202 (See 
[https://builds.apache.org/job/tobago-1.5.x/202/])
TOBAGO-1367: Remove debugMode from ClientProperties (lofwyr: 
http://svn.apache.org/viewvc/?view=rev&rev=1583657)
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/context/ClientProperties.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/java/org/apache/myfaces/tobago/example/demo/clientConfig/ClientConfigController.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tags/layout/overview.tag
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/WEB-INF/tags/layout/overview.xhtml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-demo/src/main/webapp/content/10-locale/locale.xhtml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/ClientConfigController.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/java/org/apache/myfaces/tobago/example/test/DebugModePhaseListener.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/webapp/WEB-INF/faces-config.xml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/PageRenderer.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago.properties.xml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago_de.properties.xml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/resources/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/property/tobago_es.properties.xml


> Remove debugMode from ClientProperties
> --
>
> Key: TOBAGO-1367
> URL: https://issues.apache.org/jira/browse/TOBAGO-1367
> Project: MyFaces Tobago
>  Issue Type: Task
>Reporter: Udo Schnurpfeil
>Assignee: Udo Schnurpfeil
>Priority: Minor
> Fix For: 2.0.0-beta-3, 1.5.14, 2.0.0, 3.0.0-alpha-1, 3.0.0
>
>
> This attribute is no longer needed, we handle the suff over the ProjectStage 
> from JSF.
> (for 1.5.14 and 2.0.0-beta-3 I set it to deprecated)



--
This message was sent by Atlassian JIRA
(v6.2#6252)

[jira] [Commented] (TOBAGO-1382) New attribute "name" for

[Hudson (JIRA)]

[ 
https://issues.apache.org/jira/browse/TOBAGO-1382?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14010136#comment-14010136
 ] 

Hudson commented on TOBAGO-1382:


SUCCESS: Integrated in tobago-1.5.x #202 (See 
[https://builds.apache.org/job/tobago-1.5.x/202/])
TOBAGO-1382: New attribute "name" for  (lofwyr: 
http://svn.apache.org/viewvc/?view=rev&rev=1583332)
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-core/src/main/java/org/apache/myfaces/tobago/internal/taglib/component/ObjectTagDeclaration.java
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-example/tobago-example-test/src/main/webapp/navigation.xhtml
* 
/myfaces/tobago/branches/tobago-1.5.x/tobago-theme/tobago-theme-scarborough/src/main/java/org/apache/myfaces/tobago/renderkit/html/scarborough/standard/tag/ObjectRenderer.java


> New attribute "name" for 
> 
>
> Key: TOBAGO-1382
> URL: https://issues.apache.org/jira/browse/TOBAGO-1382
> Project: MyFaces Tobago
>  Issue Type: Improvement
>  Components: Core, Themes
>Affects Versions: 1.0.41, 1.5.13, 2.0.0-beta-2
>Reporter: Udo Schnurpfeil
>Assignee: Udo Schnurpfeil
> Fix For: 2.0.0-beta-3, 1.0.42, 1.5.14, 2.0.0, 3.0.0
>
>
> The name attribute of the rendered iframe will use the clientId.
> The clientId usually contains a colon ":", but this doesn't work well in 
> JavaScript window.open(src, target) in Internet Explorer 9 and lower.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Re: [VOTE] Release of Extensions Validator 2.0.8

[Werner Punz]

+1

Werner


Am 27.05.14 10:14, schrieb Gerhard Petracek:

+1

regards,
gerhard



2014-05-27 8:29 GMT+02:00 Gerhard Petracek mailto:gpetra...@apache.org>>:

Hi,

we were running the needed tasks to get the 8th release of Apache
MyFaces Extensions Validator out.
The artifacts are deployed to Nexus [1].

The release contains the following modules for JSF 2.x:
  - ExtVal Core
  - ExtVal Property-Validation
  - ExtVal Bean-Validation
  - Trinidad-Support-Module
  - Generic-Support-Module

Please take a look at the 2.0.8 artifacts and vote!

Please note:
This vote is "majority approval" with a minimum of three +1 votes
(see [2]).


[ ] +1 for community members who have reviewed the bits
[ ] +0
[ ] -1 for fatal flaws that should cause these bits not to be
released, and why..


Thanks,
Gerhard

[1]

https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/
[2] http://www.apache.org/foundation/voting.html#ReleaseVotes

[jira] [Updated] (TRINIDAD-2476) MApplication.java needs to override subscribeToEvent

[Andy Schwartz (JIRA)]

 [ 
https://issues.apache.org/jira/browse/TRINIDAD-2476?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Andy Schwartz updated TRINIDAD-2476:


   Resolution: Fixed
Fix Version/s: 2.1.1-core
 Assignee: Andy Schwartz
   Status: Resolved  (was: Patch Available)

> MApplication.java needs to override subscribeToEvent
> 
>
> Key: TRINIDAD-2476
> URL: https://issues.apache.org/jira/browse/TRINIDAD-2476
> Project: MyFaces Trinidad
>  Issue Type: Improvement
>Reporter: Kevin Jackson
>Assignee: Andy Schwartz
> Fix For: 2.1.1-core
>
> Attachments: MApplication.java.diff, trinidad-2476-take2.patch
>
>
> The ADF unit tests fails with JSF 2.2 without override of subscribeToEvent



--
This message was sent by Atlassian JIRA
(v6.2#6252)

[jira] [Commented] (TRINIDAD-2476) MApplication.java needs to override subscribeToEvent

[Andy Schwartz (JIRA)]

[ 
https://issues.apache.org/jira/browse/TRINIDAD-2476?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14009650#comment-14009650
 ] 

Andy Schwartz commented on TRINIDAD-2476:
-

Committed fix in r1597776.  Thanks Kevin.

> MApplication.java needs to override subscribeToEvent
> 
>
> Key: TRINIDAD-2476
> URL: https://issues.apache.org/jira/browse/TRINIDAD-2476
> Project: MyFaces Trinidad
>  Issue Type: Improvement
>Reporter: Kevin Jackson
> Fix For: 2.1.1-core
>
> Attachments: MApplication.java.diff, trinidad-2476-take2.patch
>
>
> The ADF unit tests fails with JSF 2.2 without override of subscribeToEvent



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Re: [VOTE] Release of Extensions Validator 2.0.8

[Gerhard Petracek]

+1

regards,
gerhard



2014-05-27 8:29 GMT+02:00 Gerhard Petracek :

> Hi,
>
> we were running the needed tasks to get the 8th release of Apache MyFaces
> Extensions Validator out.
> The artifacts are deployed to Nexus [1].
>
> The release contains the following modules for JSF 2.x:
>  - ExtVal Core
>  - ExtVal Property-Validation
>  - ExtVal Bean-Validation
>  - Trinidad-Support-Module
>  - Generic-Support-Module
>
> Please take a look at the 2.0.8 artifacts and vote!
>
> Please note:
> This vote is "majority approval" with a minimum of three +1 votes (see
> [2]).
>
> 
> [ ] +1 for community members who have reviewed the bits
> [ ] +0
> [ ] -1 for fatal flaws that should cause these bits not to be released,
> and why..
> 
>
> Thanks,
> Gerhard
>
> [1]
> https://repository.apache.org/content/repositories/orgapachemyfaces-1024/org/apache/myfaces/extensions/validator/
> [2] http://www.apache.org/foundation/voting.html#ReleaseVotes
>