[Bug 1123055] New: OSGi info duplicated/clashing across jars
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1123055
Bug ID: 1123055
Summary: OSGi info duplicated/clashing across jars
Product: Fedora
Version: 21
Component: apache-commons-logging
Assignee: mizdebsk(a)redhat.com
Reporter: gerard(a)ryan.lt
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
mat.booth(a)redhat.com, mizdebsk(a)redhat.com,
msimacek(a)redhat.com, msrb(a)redhat.com,
SpikeFedora(a)gmail.com
Description of problem:
apache-commons logging installs 3 jars: apache-commons-logging-adapters.jar,
apache-commons-logging-api.jar, and commons-logging.jar. OSGi metadata in
META-INF/MANIFEST.MF for each of these is the same. This appears to cause a
conflict when something depends on an OSGi bundle with BSN
org.apache.commons.logging -- they all have that name, so it's not known which
will be resolved. This is noticed in eclipse-webtools, where a plugin
Require-Bundle's this...sometimes build works, sometimes it doesn't.
Actual results:
Sometimes an acceptable bundle is resolved.
Expected results:
Probably commons-logging.jar should be the only one that has the metadata for
now. It's a combination of all the classes from the other two jars.
Additional info:
Thanks to Roland Grunberg for diagnosing this!
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=rdW9oUfIzk&a=cc_unsubscribe
9 years, 9 months
[objenesis/epel7] removed maven-license-plugin dependency
by Michael Mraka
commit bf00242b67148db2fd4b9c657081e8a8b1595501
Author: Michael Mraka <michael.mraka(a)redhat.com>
Date: Fri Aug 8 13:29:08 2014 +0200
removed maven-license-plugin dependency
it's missing in EPEL7
objenesis-no-license-plugin.patch | 39 +++++++++++++++++++++++++++++++++++++
objenesis.spec | 4 ++-
2 files changed, 42 insertions(+), 1 deletions(-)
---
diff --git a/objenesis-no-license-plugin.patch b/objenesis-no-license-plugin.patch
new file mode 100644
index 0000000..0790dac
--- /dev/null
+++ b/objenesis-no-license-plugin.patch
@@ -0,0 +1,39 @@
+--- objenesis-1.2/pom.xml.orig 2014-08-08 13:25:52.498213728 +0200
++++ objenesis-1.2/pom.xml 2014-08-08 13:26:20.752908942 +0200
+@@ -189,36 +189,6 @@
+ </executions>
+ </plugin>
+ <plugin>
+- <groupId>com.mycila.maven-license-plugin</groupId>
+- <artifactId>maven-license-plugin</artifactId>
+- <version>1.6.1</version>
+- <configuration>
+- <header>${basedir}/../header.txt</header>
+- <excludes>
+- <!-- Nothing is copyrighted in target -->
+- <exclude>target/**</exclude>
+- <!-- copyrights to BEA -->
+- <exclude>src/org/objenesis/instantiator/jrockit/*.java</exclude>
+- <!-- generated pom by maven-shade-plugin -->
+- <exclude>dependency-reduced-pom.xml</exclude>
+- <!-- generated by Equinox during OSGi test -->
+- <exclude>eclipse_config/**</exclude>
+- </excludes>
+- <properties>
+- <inceptionYear>${project.inceptionYear}</inceptionYear>
+- <year>${maven.build.timestamp}</year>
+- </properties>
+- </configuration>
+- <executions>
+- <execution>
+- <id>check</id>
+- <goals>
+- <goal>check</goal>
+- </goals>
+- </execution>
+- </executions>
+- </plugin>
+- <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-remote-resources-plugin</artifactId>
+ <version>1.0</version>
diff --git a/objenesis.spec b/objenesis.spec
index 3a8c5ca..d9b1773 100644
--- a/objenesis.spec
+++ b/objenesis.spec
@@ -31,7 +31,7 @@
Summary: A library for instantiating Java objects
Name: objenesis
Version: 1.2
-Release: 17%{dist}
+Release: 18%{dist}
Group: Development/Libraries
License: ASL 2.0
URL: http://objenesis.org/
@@ -47,6 +47,7 @@ Source0: %{name}-%{version}.tar.xz
Patch1: 001-objenesis-fix-build.patch
Patch2: JRockitInstantntiatorCharacters.patch
Patch3: objenesis-no-timestamp-plugin.patch
+Patch4: objenesis-no-license-plugin.patch
BuildRequires: jpackage-utils
BuildRequires: java-devel
@@ -104,6 +105,7 @@ This package contains the API documentation for %{name}.
%patch1 -p1
%patch2 -p2
%patch3 -p1
+%patch4 -p1
# Enable generation of pom.properties (rhbz#1017850)
%pom_xpath_remove pom:addMavenDescriptor
9 years, 9 months
[objenesis/epel7] replaced maven-timestamp-plugin with maven.build.timestamp
by Michael Mraka
commit bdeb0e822b77d35635482eece155de215ce95af3
Author: Michael Mraka <michael.mraka(a)redhat.com>
Date: Mon Aug 4 16:25:41 2014 +0200
replaced maven-timestamp-plugin with maven.build.timestamp
objenesis-no-timestamp-plugin.patch | 45 +++++++++++++++++++++++++++++++++++
objenesis.spec | 4 +-
2 files changed, 47 insertions(+), 2 deletions(-)
---
diff --git a/objenesis-no-timestamp-plugin.patch b/objenesis-no-timestamp-plugin.patch
new file mode 100644
index 0000000..2ca418b
--- /dev/null
+++ b/objenesis-no-timestamp-plugin.patch
@@ -0,0 +1,45 @@
+--- objenesis-1.2.orig/pom.xml 2009-08-26 23:12:00.000000000 +0200
++++ objenesis-1.2/pom.xml 2014-08-08 10:40:00.325830999 +0200
+@@ -24,6 +24,9 @@
+ <version>1.2</version>
+ <packaging>pom</packaging>
+ <inceptionYear>2006</inceptionYear>
++ <properties>
++ <maven.build.timestamp.format>yyyy</maven.build.timestamp.format>
++ </properties>
+
+ <modules>
+ <module>main</module>
+@@ -186,23 +189,6 @@
+ </executions>
+ </plugin>
+ <plugin>
+- <groupId>com.keyboardsamurais.maven</groupId>
+- <artifactId>maven-timestamp-plugin</artifactId>
+- <version>1.0</version>
+- <executions>
+- <execution>
+- <id>year</id>
+- <goals>
+- <goal>create</goal>
+- </goals>
+- <configuration>
+- <propertyName>year</propertyName>
+- <timestampPattern>yyyy</timestampPattern>
+- </configuration>
+- </execution>
+- </executions>
+- </plugin>
+- <plugin>
+ <groupId>com.mycila.maven-license-plugin</groupId>
+ <artifactId>maven-license-plugin</artifactId>
+ <version>1.6.1</version>
+@@ -220,7 +206,7 @@
+ </excludes>
+ <properties>
+ <inceptionYear>${project.inceptionYear}</inceptionYear>
+- <year>${year}</year>
++ <year>${maven.build.timestamp}</year>
+ </properties>
+ </configuration>
+ <executions>
diff --git a/objenesis.spec b/objenesis.spec
index 33e7940..3a8c5ca 100644
--- a/objenesis.spec
+++ b/objenesis.spec
@@ -46,14 +46,13 @@ Source0: %{name}-%{version}.tar.xz
# maven-license-plugin groupID to latest version available.
Patch1: 001-objenesis-fix-build.patch
Patch2: JRockitInstantntiatorCharacters.patch
+Patch3: objenesis-no-timestamp-plugin.patch
BuildRequires: jpackage-utils
BuildRequires: java-devel
BuildRequires: junit
BuildRequires: maven-local
BuildRequires: maven-shade-plugin
-BuildRequires: maven-license-plugin
-BuildRequires: maven-timestamp-plugin
BuildRequires: xpp3-minimal
BuildRequires: objectweb-asm
BuildRequires: apache-resource-bundles
@@ -104,6 +103,7 @@ This package contains the API documentation for %{name}.
#%%patch0 -b .sav0
%patch1 -p1
%patch2 -p2
+%patch3 -p1
# Enable generation of pom.properties (rhbz#1017850)
%pom_xpath_remove pom:addMavenDescriptor
9 years, 9 months
[ehcache-parent] Fix for F21 xmvn changes (#1106206)
by Yaakov Selkowitz
commit 66d435cfd8b5104fc2e00ab9ec5922e5605754d4
Author: Yaakov Selkowitz <yselkowi(a)redhat.com>
Date: Thu Aug 7 18:14:50 2014 -0500
Fix for F21 xmvn changes (#1106206)
ehcache-parent.spec | 9 +++++----
1 files changed, 5 insertions(+), 4 deletions(-)
---
diff --git a/ehcache-parent.spec b/ehcache-parent.spec
index b9fd1e2..8bdf0ea 100644
--- a/ehcache-parent.spec
+++ b/ehcache-parent.spec
@@ -1,6 +1,6 @@
Name: ehcache-parent
Version: 2.3
-Release: 7%{?dist}
+Release: 8%{?dist}
Summary: Ehcache Parent
Group: Development/Libraries
License: ASL 2.0
@@ -38,11 +38,12 @@ install -pm 644 pom.xml $RPM_BUILD_ROOT%{_mavenpomdir}/JPP-%{name}.pom
%add_maven_depmap JPP-%{name}.pom
-%files
-%{_mavenpomdir}/*
-%{_mavendepmapfragdir}/*
+%files -f .mfiles
%changelog
+* Thu Aug 07 2014 Yaakov Selkowitz <yselkowi(a)redhat.com> - 2.3-8
+- Fix for F21 xmvn changes (#1106206)
+
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 2.3-7
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
9 years, 9 months
[Bug 1069911] CVE-2013-4590 tomcat: information disclosure via XXE when running untrusted web applications
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1069911
--- Doc Text *updated* ---
It was found that several application-provided XML files, such as web.xml, content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting XML External Entity (XXE) attacks. A remote attacker could use this flaw to circumvent security restrictions set by the Java Security Manager, and gain access to sensitive information on the system. Note that this flaw only affected deployments in which Tomcat is running web applications from untrusted sources, such as in a shared hosting environment.
--- Comment #29 from Martin Prpic <mprpic(a)redhat.com> ---
IssueDescription:
It was found that several application-provided XML files, such as web.xml,
content.xml, *.tld, *.tagx, and *.jspx, resolved external entities, permitting
XML External Entity (XXE) attacks. A remote attacker could use this flaw to
circumvent security restrictions set by the Java Security Manager, and gain
access to sensitive information on the system. Note that this flaw only
affected deployments in which Tomcat is running web applications from untrusted
sources, such as in a shared hosting environment.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=MeoSndJ713&a=cc_unsubscribe
9 years, 9 months