[PR] Fixed two non-deterministic tests in EnumUtilsTest.java [commons-lang]

2023-11-14 Thread via GitHub
harshith2000 opened a new pull request, #1131: URL: https://github.com/apache/commons-lang/pull/1131 Found two non-deterministic tests failing in EnumUtilsTest.java Test names: [test_getEnumMap](https://github.com/apache/commons-lang/blob/912ab7154d5280a2632f375b5efd97e1b70149a4/src/test

Re: [PR] COMPRESS-632: Fixes for CPIO bugs [commons-compress]

2023-11-14 Thread via GitHub
yakovsh commented on code in PR #441: URL: https://github.com/apache/commons-compress/pull/441#discussion_r1393409551 ## src/main/java/org/apache/commons/compress/archivers/cpio/CpioArchiveInputStream.java: ## @@ -406,7 +406,11 @@ public int read(final byte[] b, final int off, f

Re: [PR] COMPRESS-632: Fixes for CPIO bugs [commons-compress]

2023-11-14 Thread via GitHub
yakovsh commented on code in PR #441: URL: https://github.com/apache/commons-compress/pull/441#discussion_r1393399300 ## src/test/java/org/apache/commons/compress/archivers/cpio/CpioArchiveEntryTest.java: ## @@ -0,0 +1,34 @@ +/* + * Licensed to the Apache Software Foundation (AS

Re: [PR] COMPRESS-632: Fixes and tests for ArInputStream [commons-compress]

2023-11-14 Thread via GitHub
yakovsh commented on PR #440: URL: https://github.com/apache/commons-compress/pull/440#issuecomment-1811506307 Thank you! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

Re: [PR] COMPRESS-632: Fixes for CPIO bugs [commons-compress]

2023-11-14 Thread via GitHub
garydgregory commented on code in PR #441: URL: https://github.com/apache/commons-compress/pull/441#discussion_r1393339230 ## src/test/java/org/apache/commons/compress/archivers/cpio/CpioArchiveEntryTest.java: ## @@ -0,0 +1,34 @@ +/* + * Licensed to the Apache Software Foundatio

Re: [PR] COMPRESS-632: Fixes and tests for ArInputStream [commons-compress]

2023-11-14 Thread via GitHub
garydgregory merged PR #440: URL: https://github.com/apache/commons-compress/pull/440 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...

[PR] COMPRESS-632: Fixes for CPIO bugs [commons-compress]

2023-11-14 Thread via GitHub
yakovsh opened a new pull request, #441: URL: https://github.com/apache/commons-compress/pull/441 This PR adds a try/catch for long value parsing in CpioArchiveInputStream and for the overflow in one of the methods in CpioArchiveEntry. Both of these fixes are related to the fuzzing work tra

[PR] COMPRESS-632: Fixes and tests for ArInputStream [commons-compress]

2023-11-14 Thread via GitHub
yakovsh opened a new pull request, #440: URL: https://github.com/apache/commons-compress/pull/440 This supports the fuzzing work in COMPRESS-632. The PR primarily adds checks around a number of places where the fields in the AR format are supposed to be numeric but are not. -- This is an

[jira] [Commented] (IMAGING-194) Tiff with JPEG,Zip compression fails to decompress

2023-11-14 Thread Gary Lucas (Jira)
[ https://issues.apache.org/jira/browse/IMAGING-194?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17786054#comment-17786054 ] Gary Lucas commented on IMAGING-194: New code to address this issue is now available

Re: [PR] Add support for OpenSSL 3.0.x [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF commented on PR #200: URL: https://github.com/apache/commons-crypto/pull/200#issuecomment-1810717633 AFAICT this PR is no longer needed -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the

Re: [PR] Add support for OpenSSL 3.0.x [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF closed pull request #200: Add support for OpenSSL 3.0.x URL: https://github.com/apache/commons-crypto/pull/200 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubs

Re: [PR] Drop support for OpenSSL 1.0.x [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF merged PR #271: URL: https://github.com/apache/commons-crypto/pull/271 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@common

[jira] [Commented] (BEANUTILS-500) Upgrade from Apache Commons Collections 3 to 4

2023-11-14 Thread Steve Lopez (Jira)
[ https://issues.apache.org/jira/browse/BEANUTILS-500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785980#comment-17785980 ] Steve Lopez commented on BEANUTILS-500: --- bump > Upgrade from Apache Commons Col

[PR] Drop support for OpenSSL 1.0.x [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF opened a new pull request, #271: URL: https://github.com/apache/commons-crypto/pull/271 (no comment) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe,

Re: [PR] Unnecessary profiles; use -Dtarget.name instead [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF merged PR #263: URL: https://github.com/apache/commons-crypto/pull/263 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@common

[jira] [Commented] (BEANUTILS-562) remove dependency on commons-logging

2023-11-14 Thread Samael Bate (Jira)
[ https://issues.apache.org/jira/browse/BEANUTILS-562?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785920#comment-17785920 ] Samael Bate commented on BEANUTILS-562: --- It seems like there may actually be a c

Re: [PR] COMPRESS-632: Fix for zero size headers in ArjInputStream [commons-compress]

2023-11-14 Thread via GitHub
garydgregory merged PR #439: URL: https://github.com/apache/commons-compress/pull/439 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...

Re: [PR] COMPRESS-632: Check for invalid PAX values in TarArchiveEntry [commons-compress]

2023-11-14 Thread via GitHub
yakovsh commented on PR #438: URL: https://github.com/apache/commons-compress/pull/438#issuecomment-1810258081 Thank you! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To

Re: [PR] COMPRESS-632: Check for invalid PAX values in TarArchiveEntry [commons-compress]

2023-11-14 Thread via GitHub
garydgregory merged PR #438: URL: https://github.com/apache/commons-compress/pull/438 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...

[jira] [Commented] (LOGGING-167) [Java-9][JPMS] automatic module cannot be used with jlink: commons.logging

2023-11-14 Thread Samael Bate (Jira)
[ https://issues.apache.org/jira/browse/LOGGING-167?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17785899#comment-17785899 ] Samael Bate commented on LOGGING-167: - Can this issue be marked as done now that {{

[PR] refactor: use ReentrantLock in PoolableConnection.close (#DBCP-591) [commons-dbcp]

2023-11-14 Thread via GitHub
cortlepp-intershop opened a new pull request, #322: URL: https://github.com/apache/commons-dbcp/pull/322 This PR removes synchronized from `PoolableConnection.close()` and replaces it by a `ReentrantLock` which is owned by the connection. I could not find any references in the code which ex

[jira] [Resolved] (CRYPTO-176) Drop dependency on Commons IO?

2023-11-14 Thread Sebb (Jira)
[ https://issues.apache.org/jira/browse/CRYPTO-176?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Sebb resolved CRYPTO-176. - Resolution: Won't Fix > Drop dependency on Commons IO? > -- > > Key:

Re: [PR] Bump docker/setup-qemu-action from 2.2.0 to 3.0.0 [commons-crypto]

2023-11-14 Thread via GitHub
sebbASF merged PR #270: URL: https://github.com/apache/commons-crypto/pull/270 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@common