--------------------------------------------------------------------------------Fedora Update Notification
FEDORA-2020-cf8ef2f333
2020-08-31 15:48:37.485399
--------------------------------------------------------------------------------Name        : eclipse-webtools
Product     : Fedora 32
Version     : 3.18.0
Release     : 4.fc32
URL         : https://eclipse.dev/webtools/
Summary     : Eclipse Webtools Projects
Description :
Eclipse Webtools. This contains sub-packages for different sub-projects
of Eclipse Webtools project, including Server Tools, SourceEditing Tools,
Webservices Tools, Java EE Tools, JSF Tools, and Dali (JPA) Tools.

--------------------------------------------------------------------------------Update Information:

Updates to the latest upstream release of Eclipse. See the upstream release
notes for details: https://eclipseide.org/release/noteworthy/  Also
contains security fixes for CVE-2019-17566 and CVE-2019-17638.
--------------------------------------------------------------------------------ChangeLog:

* Mon Jul 27 2020 Fedora Release Engineering  - 3.18.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Thu Jul 16 2020 Mat Booth  - 3.18.0-3
- Remove no longer needed dep on jdom and json-simple and add missing BRs
  on xml deps
- Drop xsl and xpath features
- Always use java 1.8 for building due to use of CORBA
* Fri Jul 10 2020 Mat Booth  - 3.18.0-2
- Drop javaee/webservices/jsf plugins
* Wed Jun 24 2020 Mat Booth  - 3.18.0-1
- Update to latest upstream release
* Fri Jan 24 2020 Mat Booth  - 3.15.0-4
- Drop JPA tooling and remove requirement on Datatools
* Mon Dec  9 2019 Mat Booth  - 3.15.0-3
- Fix build against latest jetty version
* Mon Dec  9 2019 Mat Booth  - 3.15.0-2
- Drop JSDT features
* Mon Sep 16 2019 Mat Booth  - 3.15.0-1
- Update to latest upstream release
* Wed Jun 26 2019 Mat Booth  - 3.14.0-3
- Build missing xinclude embedded jar
* Fri Jun 14 2019 Mat Booth  - 3.14.0-2
- Avoid running out of heap on s390x
* Wed Jun 12 2019 Mat Booth  - 3.14.0-1
- Update to latest upstream release
* Tue Jun 11 2019 Mat Booth  - 3.13.0-2
- Avoid using jgit providers from tycho-extras
--------------------------------------------------------------------------------References:

  [ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"
        https://bugzilla.redhat.com/show_bug.cgi?id=1848617
  [ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure
        https://bugzilla.redhat.com/show_bug.cgi?id=1864680
--------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Fedora 32: eclipse-webtools 2020-cf8ef2f333

August 31, 2020
Updates to the latest upstream release of Eclipse

Summary

Eclipse Webtools. This contains sub-packages for different sub-projects

of Eclipse Webtools project, including Server Tools, SourceEditing Tools,

Webservices Tools, Java EE Tools, JSF Tools, and Dali (JPA) Tools.

Updates to the latest upstream release of Eclipse. See the upstream release

notes for details: https://eclipseide.org/release/noteworthy/ Also

contains security fixes for CVE-2019-17566 and CVE-2019-17638.

* Mon Jul 27 2020 Fedora Release Engineering - 3.18.0-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

* Thu Jul 16 2020 Mat Booth - 3.18.0-3

- Remove no longer needed dep on jdom and json-simple and add missing BRs

on xml deps

- Drop xsl and xpath features

- Always use java 1.8 for building due to use of CORBA

* Fri Jul 10 2020 Mat Booth - 3.18.0-2

- Drop javaee/webservices/jsf plugins

* Wed Jun 24 2020 Mat Booth - 3.18.0-1

- Update to latest upstream release

* Fri Jan 24 2020 Mat Booth - 3.15.0-4

- Drop JPA tooling and remove requirement on Datatools

* Mon Dec 9 2019 Mat Booth - 3.15.0-3

- Fix build against latest jetty version

* Mon Dec 9 2019 Mat Booth - 3.15.0-2

- Drop JSDT features

* Mon Sep 16 2019 Mat Booth - 3.15.0-1

- Update to latest upstream release

* Wed Jun 26 2019 Mat Booth - 3.14.0-3

- Build missing xinclude embedded jar

* Fri Jun 14 2019 Mat Booth - 3.14.0-2

- Avoid running out of heap on s390x

* Wed Jun 12 2019 Mat Booth - 3.14.0-1

- Update to latest upstream release

* Tue Jun 11 2019 Mat Booth - 3.13.0-2

- Avoid using jgit providers from tycho-extras

[ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href"

https://bugzilla.redhat.com/show_bug.cgi?id=1848617

[ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure

https://bugzilla.redhat.com/show_bug.cgi?id=1864680

su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/keys

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

FEDORA-2020-cf8ef2f333 2020-08-31 15:48:37.485399 Product : Fedora 32 Version : 3.18.0 Release : 4.fc32 URL : https://eclipse.dev/webtools/ Summary : Eclipse Webtools Projects Description : Eclipse Webtools. This contains sub-packages for different sub-projects of Eclipse Webtools project, including Server Tools, SourceEditing Tools, Webservices Tools, Java EE Tools, JSF Tools, and Dali (JPA) Tools. Updates to the latest upstream release of Eclipse. See the upstream release notes for details: https://eclipseide.org/release/noteworthy/ Also contains security fixes for CVE-2019-17566 and CVE-2019-17638. * Mon Jul 27 2020 Fedora Release Engineering - 3.18.0-4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild * Thu Jul 16 2020 Mat Booth - 3.18.0-3 - Remove no longer needed dep on jdom and json-simple and add missing BRs on xml deps - Drop xsl and xpath features - Always use java 1.8 for building due to use of CORBA * Fri Jul 10 2020 Mat Booth - 3.18.0-2 - Drop javaee/webservices/jsf plugins * Wed Jun 24 2020 Mat Booth - 3.18.0-1 - Update to latest upstream release * Fri Jan 24 2020 Mat Booth - 3.15.0-4 - Drop JPA tooling and remove requirement on Datatools * Mon Dec 9 2019 Mat Booth - 3.15.0-3 - Fix build against latest jetty version * Mon Dec 9 2019 Mat Booth - 3.15.0-2 - Drop JSDT features * Mon Sep 16 2019 Mat Booth - 3.15.0-1 - Update to latest upstream release * Wed Jun 26 2019 Mat Booth - 3.14.0-3 - Build missing xinclude embedded jar * Fri Jun 14 2019 Mat Booth - 3.14.0-2 - Avoid running out of heap on s390x * Wed Jun 12 2019 Mat Booth - 3.14.0-1 - Update to latest upstream release * Tue Jun 11 2019 Mat Booth - 3.13.0-2 - Avoid using jgit providers from tycho-extras [ 1 ] Bug #1848617 - CVE-2019-17566 batik: SSRF via "xlink:href" https://bugzilla.redhat.com/show_bug.cgi?id=1848617 [ 2 ] Bug #1864680 - CVE-2019-17638 jetty: double release of resource can lead to information disclosure https://bugzilla.redhat.com/show_bug.cgi?id=1864680 su -c 'dnf upgrade --advisory FEDORA-2020-cf8ef2f333' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
Product : Fedora 32
Version : 3.18.0
Release : 4.fc32
URL : https://eclipse.dev/webtools/
Summary : Eclipse Webtools Projects

Related News