java-sig-commits November 2012

java-sig-commits@lists.fedoraproject.org

14 participants
540 discussions

[plexus-classworlds] Revert "Provide and obsolete classworlds"
by Mikolaj Izdebski 21 Nov '12

21 Nov '12

Summary of changes: 7db31a2... Revert "Provide and obsolete classworlds" (*) (*) This commit already existed in another branch; no separate mail sent

1 0

[plexus-classworlds/f18] Revert "Provide and obsolete classworlds"
by Mikolaj Izdebski 21 Nov '12

21 Nov '12

commit 7db31a2c9db03d7df1c947ad4d713f6e1fe50c3e Author: Mikolaj Izdebski <mizdebsk(a)redhat.com> Date: Wed Nov 21 12:42:43 2012 +0100 Revert "Provide and obsolete classworlds" This reverts commit a1d004b6a3c874e59a01f32d4e6cdb069fd31529. plexus-classworlds.spec | 14 +++++--------- 1 files changed, 5 insertions(+), 9 deletions(-) --- diff --git a/plexus-classworlds.spec b/plexus-classworlds.spec index 6a7fbda..fd97d8a 100644 --- a/plexus-classworlds.spec +++ b/plexus-classworlds.spec @@ -34,7 +34,7 @@ Name: %{parent}-%{subname} Version: 2.4 -Release: 9%{?dist} +Release: 10%{?dist} Summary: Plexus Classworlds Classloader Framework License: ASL 2.0 and Plexus Group: Development/Libraries @@ -63,11 +63,6 @@ BuildRequires: maven-surefire-provider-junit BuildRequires: maven-plugin-bundle BuildRequires: plexus-utils -Requires: java -Requires: jpackage-utils -Provides: %{subname} = %{version}-%{release} -Obsoletes: %{subname} < %{version}-%{release} - %description Classworlds is a framework for container developers who require complex manipulation of Java's ClassLoaders. @@ -82,8 +77,6 @@ classworlds. Summary: Javadoc for %{name} Group: Documentation Requires: jpackage-utils -Provides: %{subname}-javadoc = %{version}-%{release} -Obsoletes: %{subname}-javadoc < %{version}-%{release} %description javadoc API documentation for %{name}. @@ -122,7 +115,7 @@ install -Dpm 644 target/%{name}-%{version}.jar \ # pom install -Dpm 644 pom.xml $RPM_BUILD_ROOT%{_mavenpomdir}/JPP.%{parent}-%{subname}.pom -%add_maven_depmap JPP.%{parent}-%{subname}.pom plexus/%{subname}.jar -a classworlds:classworlds +%add_maven_depmap JPP.%{parent}-%{subname}.pom plexus/%{subname}.jar # javadoc install -d -m 755 $RPM_BUILD_ROOT%{_javadocdir}/%{name} @@ -139,6 +132,9 @@ cp -pr target/site/apidocs/* $RPM_BUILD_ROOT%{_javadocdir}/%{name} %doc %{_javadocdir}/%{name} %changelog +* Wed Nov 21 2012 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 2.4-10 +- Revert change from 2.4-9 + * Tue Nov 20 2012 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 2.4-9 - Provide and obsolete classworlds

1 0

[plexus-pom] Install LICENSE file
by Mikolaj Izdebski 21 Nov '12

21 Nov '12

Summary of changes: 6f8101d... Install LICENSE file (*) (*) This commit already existed in another branch; no separate mail sent

1 0

[plexus-pom/f18] Install LICENSE file
by Mikolaj Izdebski 21 Nov '12

21 Nov '12

commit 6f8101dfbdfa87c039279cb899f0b60d5b4d0cf0 Author: Mikolaj Izdebski <mizdebsk(a)redhat.com> Date: Wed Nov 21 11:29:43 2012 +0100 Install LICENSE file plexus-pom.spec | 11 +++++++++-- sources | 1 + 2 files changed, 10 insertions(+), 2 deletions(-) --- diff --git a/plexus-pom.spec b/plexus-pom.spec index cd171c3..a7fc8ab 100644 --- a/plexus-pom.spec +++ b/plexus-pom.spec @@ -1,6 +1,6 @@ Name: plexus-pom Version: 3.0.1 -Release: 2%{?dist} +Release: 3%{?dist} Summary: Root Plexus Projects pom Group: Development/Libraries License: ASL 2.0 @@ -9,6 +9,7 @@ URL: https://github.com/sonatype/%{name}/ # cd plexus-pom # git archive --format=tar --prefix=plexus-pom-3.0.1/ plexus-3.0.1 | xz >plexus-pom-3.0.1.tar.xz Source0: plexus-pom-%{version}.tar.xz +Source1: http://www.apache.org/licenses/LICENSE-2.0.txt # remove # org.codehaus.mojo taglist-maven-plugin 2.4 @@ -41,6 +42,7 @@ executing software projects. %setup -q %patch0 -p0 %patch1 -p0 +cp -p %{SOURCE1} LICENSE %build @@ -53,12 +55,17 @@ install -pm 644 pom.xml %{buildroot}%{_mavenpomdir}/JPP.plexus-plexus.pom %add_maven_depmap JPP.plexus-plexus.pom %files +%doc LICENSE %{_mavenpomdir}/JPP.plexus-plexus.pom %{_mavendepmapfragdir}/%{name} %changelog +* Wed Nov 21 2012 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 3.0.1-3 +- Install LICENSE file +- Resolves: rhbz#878825 + * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 3.0.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild * Wed Feb 08 2012 gil cattaneo <puntogil(a)libero.it> 3.0.1-1 -- initial rpm \ No newline at end of file +- initial rpm diff --git a/sources b/sources index cc7899b..4eb9ecc 100644 --- a/sources +++ b/sources @@ -1 +1,2 @@ 75753f24254b405a3a5c0d20e57e56c8 plexus-pom-3.0.1.tar.xz +3b83ef96387f14655fc854ddc3c6bd57 LICENSE-2.0.txt

1 0

File LICENSE-2.0.txt uploaded to lookaside cache by mizdebsk
by Mikolaj Izdebski 21 Nov '12

21 Nov '12

A file has been added to the lookaside cache for plexus-pom: 3b83ef96387f14655fc854ddc3c6bd57 LICENSE-2.0.txt

1 0

[plexus-container-default] Ignore test failures caused by plexus-classworlds replacing classworlds
by Stanislav Ochotnicky 21 Nov '12

21 Nov '12

commit 36d87fc3de8e4a67af18cbb96a7654563b8bf21a Author: Stanislav Ochotnicky <sochotnicky(a)redhat.com> Date: Wed Nov 21 11:17:27 2012 +0100 Ignore test failures caused by plexus-classworlds replacing classworlds plexus-container-default.spec | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) --- diff --git a/plexus-container-default.spec b/plexus-container-default.spec index ee2dc08..41bd100 100644 --- a/plexus-container-default.spec +++ b/plexus-container-default.spec @@ -82,7 +82,9 @@ Javadoc for %{name}. %patch0 -p1 %build -mvn-rpmbuild install javadoc:aggregate +# ignoring test failures caused by getting rid of old classworlds +mvn-rpmbuild -Dmaven.test.failure.ignore=true \ + install javadoc:aggregate %install

1 0

[plexus-container-default] Fix license tag
by Stanislav Ochotnicky 20 Nov '12

20 Nov '12

commit 5de02c3fd06a2bd259ccda8248c033664ba4c9e6 Author: Stanislav Ochotnicky <sochotnicky(a)redhat.com> Date: Tue Nov 20 16:58:04 2012 +0100 Fix license tag plexus-container-default.spec | 11 +++++++++-- 1 files changed, 9 insertions(+), 2 deletions(-) --- diff --git a/plexus-container-default.spec b/plexus-container-default.spec index f73a012..ee2dc08 100644 --- a/plexus-container-default.spec +++ b/plexus-container-default.spec @@ -33,10 +33,14 @@ Name: plexus-container-default Version: 1.0 -Release: 0.9.a9%{?dist} +Release: 0.10.a9%{?dist} Epoch: 0 Summary: Default Plexus Container -License: ASL 2.0 and MIT +# varied mixture of licenses +# ASL 1.1: grep for 'The Apache Software License, Version 1.1' +# ASL 2.0: grep for 'Apache License, Version 2.0' +# MIT: grep for 'The MIT License' +License: ASL 2.0 and MIT and ASL 1.1 Group: Development/Libraries URL: http://plexus.codehaus.org/ # git clone git://github.com/sonatype/plexus-containers.git @@ -113,6 +117,9 @@ rm -rf $(readlink -f %{_javadocdir}/%{name}) %{_javadocdir}/%{name} || : %changelog +* Tue Nov 20 2012 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 0:1.0-0.10.a9 +- Fix license tag + * Sat Jul 21 2012 Fedora Release Engineering <rel-eng(a)lists.fedoraproject.org> - 0:1.0-0.9.a9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

1 0

[Bug 873664] CVE-2012-3439 tomcat: three DIGEST authentication implementation issues
by Red Hat Bugzilla 20 Nov '12

20 Nov '12

Product: Security Response https://bugzilla.redhat.com/show_bug.cgi?id=873664 Jan Lieskovsky <jlieskov(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Alias| |CVE-2012-5885, | |CVE-2012-5886, | |CVE-2012-5587 --- Comment #9 from Jan Lieskovsky <jlieskov(a)redhat.com> --- The CVE identifier of CVE-2012-3439 has been rejected (and therefore should not be used) by MITRE: -- ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-5885, CVE-2012-5886, CVE-2012-5887. Reason: This candidate is a duplicate of CVE-2012-5885, CVE-2012-5886, and CVE-2012-5887. Notes: All CVE users should reference one or more of CVE-2012-5885, CVE-2012-5886, and CVE-2012-5887 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. -- in favour of the following three ids: CVE-2012-5885, CVE-2012-5886, and CVE-2012-5887, whose description is as follows: 1) CVE-2012-5885: ================= The replay-countermeasure functionality in the HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 tracks cnonce (aka client nonce) values instead of nonce (aka server nonce) and nc (aka nonce-count) values, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests, a different vulnerability than CVE-2011-1184. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5885 http://svn.apache.org/viewvc?view=revision&revision=1377807 http://svn.apache.org/viewvc?view=revision&revision=1380829 http://svn.apache.org/viewvc?view=revision&revision=1392248 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html 2) CVE-2012-5886: ================= The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 caches information about the authenticated user within the session state, which makes it easier for remote attackers to bypass authentication via vectors related to the session ID. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5886 http://svn.apache.org/viewvc?view=revision&revision=1377807 http://svn.apache.org/viewvc?view=revision&revision=1380829 http://svn.apache.org/viewvc?view=revision&revision=1392248 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html 3) CVE-2012-5887: ================= The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5887 http://svn.apache.org/viewvc?view=revision&revision=1377807 http://svn.apache.org/viewvc?view=revision&revision=1380829 http://svn.apache.org/viewvc?view=revision&revision=1392248 http://tomcat.apache.org/security-5.html http://tomcat.apache.org/security-6.html http://tomcat.apache.org/security-7.html -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[plexus-classworlds/f18] Provide and obsolete classworlds
by Mikolaj Izdebski 20 Nov '12

20 Nov '12

Summary of changes: a1d004b... Provide and obsolete classworlds (*) (*) This commit already existed in another branch; no separate mail sent

1 0

[plexus-classworlds] Provide and obsolete classworlds
by Mikolaj Izdebski 20 Nov '12

20 Nov '12

commit a1d004b6a3c874e59a01f32d4e6cdb069fd31529 Author: Mikolaj Izdebski <mizdebsk(a)redhat.com> Date: Tue Nov 20 14:21:08 2012 +0100 Provide and obsolete classworlds plexus-classworlds.spec | 14 ++++++++++++-- 1 files changed, 12 insertions(+), 2 deletions(-) --- diff --git a/plexus-classworlds.spec b/plexus-classworlds.spec index edd31e1..6a7fbda 100644 --- a/plexus-classworlds.spec +++ b/plexus-classworlds.spec @@ -34,7 +34,7 @@ Name: %{parent}-%{subname} Version: 2.4 -Release: 8%{?dist} +Release: 9%{?dist} Summary: Plexus Classworlds Classloader Framework License: ASL 2.0 and Plexus Group: Development/Libraries @@ -63,6 +63,11 @@ BuildRequires: maven-surefire-provider-junit BuildRequires: maven-plugin-bundle BuildRequires: plexus-utils +Requires: java +Requires: jpackage-utils +Provides: %{subname} = %{version}-%{release} +Obsoletes: %{subname} < %{version}-%{release} + %description Classworlds is a framework for container developers who require complex manipulation of Java's ClassLoaders. @@ -77,6 +82,8 @@ classworlds. Summary: Javadoc for %{name} Group: Documentation Requires: jpackage-utils +Provides: %{subname}-javadoc = %{version}-%{release} +Obsoletes: %{subname}-javadoc < %{version}-%{release} %description javadoc API documentation for %{name}. @@ -115,7 +122,7 @@ install -Dpm 644 target/%{name}-%{version}.jar \ # pom install -Dpm 644 pom.xml $RPM_BUILD_ROOT%{_mavenpomdir}/JPP.%{parent}-%{subname}.pom -%add_maven_depmap JPP.%{parent}-%{subname}.pom plexus/%{subname}.jar +%add_maven_depmap JPP.%{parent}-%{subname}.pom plexus/%{subname}.jar -a classworlds:classworlds # javadoc install -d -m 755 $RPM_BUILD_ROOT%{_javadocdir}/%{name} @@ -132,6 +139,9 @@ cp -pr target/site/apidocs/* $RPM_BUILD_ROOT%{_javadocdir}/%{name} %doc %{_javadocdir}/%{name} %changelog +* Tue Nov 20 2012 Mikolaj Izdebski <mizdebsk(a)redhat.com> - 2.4-9 +- Provide and obsolete classworlds + * Mon Nov 19 2012 Stanislav Ochotnicky <sochotnicky(a)redhat.com> - 2.4-8 - Fix source URL to be stable

1 0

← Newer
1
...
36
37
38
39
40
41
42
...
54
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

java-sig-commits November 2012