commit 975bb08a657d7fe7ea86eef074578bccc436493d902be09d23b4fadd1783891a Author: Adrian Schröter Date: Fri May 3 10:57:28 2024 +0200 Sync from SUSE:SLFO:Main apache-commons-beanutils revision c6507cdff9152ae512fa55be78cfb241 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/apache-commons-beanutils-fix-build-version.patch b/apache-commons-beanutils-fix-build-version.patch new file mode 100644 index 0000000..d6e23c3 --- /dev/null +++ b/apache-commons-beanutils-fix-build-version.patch @@ -0,0 +1,13 @@ +Index: commons-beanutils-1.9.4-src/build.xml +=================================================================== +--- commons-beanutils-1.9.4-src.orig/build.xml ++++ commons-beanutils-1.9.4-src/build.xml +@@ -43,7 +43,7 @@ + + + +- ++ + + + diff --git a/apache-commons-beanutils.changes b/apache-commons-beanutils.changes new file mode 100644 index 0000000..afa75fc --- /dev/null +++ b/apache-commons-beanutils.changes @@ -0,0 +1,160 @@ +------------------------------------------------------------------- +Tue Oct 31 08:36:54 UTC 2023 - Fridrich Strba + +- Clean and simplify the spec file + +------------------------------------------------------------------- +Mon Oct 7 07:22:44 UTC 2019 - Fridrich Strba + +- Add aliases to account for the ephemeral commons-beanutils-core + and commons-beanutils-bean-collections split. + +------------------------------------------------------------------- +Thu Oct 3 08:16:19 UTC 2019 - Fridrich Strba + +- Remove reference to parent pom, since it is not needed when not + building with maven + +------------------------------------------------------------------- +Wed Aug 21 14:56:26 UTC 2019 - Pedro Monreal Gonzalez + +- Update to 1.9.4 + * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114 +- Security fix: [bsc#1146657, CVE-2019-10086] + * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class + level property access by default, thus protecting against CVE-2014-0114. +- Fix build version in build.xml + * Added apache-commons-beanutils-fix-build-version.patch + +------------------------------------------------------------------- +Tue Oct 23 17:30:33 UTC 2018 - Fridrich Strba + +- Cleanup the maven pom files installation + +------------------------------------------------------------------- +Fri Sep 21 07:44:23 UTC 2018 - Tomáš Chvátal + +- Fix the Source URLs to use mirrors properly + +------------------------------------------------------------------- +Thu Sep 20 10:45:41 UTC 2018 - pmonrealgonzalez@suse.com + +- Updated to 1.9.3 + * This is a bug fix release, which also improves the tests for + building on Java 8. + * Note that Java 8 and later no longer support indexed bean + properties on java.util.List, only on arrays like String[]. + (BEANUTILS-492). This affects PropertyUtils.getPropertyType() + and PropertyUtils.getPropertyDescriptor(); their javadoc have + therefore been updated to reflect this change in the JDK. + * Changes in this version include: + - Fixed Bugs: + * BEANUTILS-477: Changed log level in FluentPropertyBeanIntrospector + * BEANUTILS-492: Fixed exception when setting indexed properties + on DynaBeans. + * BEANUTILS-470: Precision lost when converting BigDecimal. + * BEANUTILS-465: Indexed List Setters fixed. + - Changes: + * BEANUTILS-433: Update dependency from JUnit 3.8.1 to 4.12. + * BEANUTILS-469: Update commons-logging from 1.1.1 to 1.2. + * BEANUTILS-474: FluentPropertyBeanIntrospector does not use the + same naming algorithm as DefaultBeanIntrospector. + * BEANUTILS-490: Update Java requirement from Java 5 to 6. + * BEANUTILS-482: Update commons-collections from 3.2.1 to 3.2.2 + (CVE-2015-4852). + * BEANUTILS-490: Update java requirement to Java 6. + * BEANUTILS-492: IndexedPropertyDescriptor tests now pass on Java 8. + * BEANUTILS-495: DateConverterTestBase fails on M/d/yy in Java 9. + * BEANUTILS-496: testGetDescriptorInvalidBoolean fails on Java 9. + - Historical list of changes: + http://commons.apache.org/proper/commons-beanutils/changes-report.html + +- Refreshed patch jdk9.patch for this version update + +------------------------------------------------------------------- +Tue May 15 06:03:11 UTC 2018 - fstrba@suse.com + +- Modified patch: + * jdk9.patch + + Build with source and target 8 to prepare for a possible + removal of 1.6 compatibility +- Run fdupes on documentation + +------------------------------------------------------------------- +Thu Sep 14 09:25:26 UTC 2017 - fstrba@suse.com + +- Added patch: + * jdk9.patch + - Specify java source and target level 1.6 in order to allow + building with jdk9 + +------------------------------------------------------------------- +Thu Dec 4 18:53:24 UTC 2014 - p.drouand@gmail.com + +- Remove java-devel dependency; not needed anymore + +------------------------------------------------------------------- +Tue Jul 8 11:35:52 UTC 2014 - tchvatal@suse.com + +- Cleanup bit with spec-cleaner + +------------------------------------------------------------------- +Mon Jul 7 08:04:04 UTC 2014 - dmacvicar@suse.de + +- update to 1.9.2 +- CVE-2014-3540: + 'class' property is exposed, potentially leading to RCE (bnc#885963) +- for full changelog, see + * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt + * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt + * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt + +------------------------------------------------------------------- +Mon Apr 2 13:23:15 UTC 2012 - mvyskocil@suse.cz + +- update to 1.8.3 and rename to apache- to follow the upstream +- fixes in this release + * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366 + * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which + uses WeakHashMap is not thread-safe + * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to + ResultSetDynaClass and RowSetDynaClass + * and a lot of other like NPE in BeanUtilsBean.setProperty() + +------------------------------------------------------------------- +Mon Sep 25 11:25:13 CEST 2006 - skh@suse.de + +- don't use icecream +- use source="1.4" and target="1.4" for build with java 1.5 + +------------------------------------------------------------------- +Wed Jan 25 21:46:36 CET 2006 - mls@suse.de + +- converted neededforbuild to BuildRequires + +------------------------------------------------------------------- +Wed Jul 27 16:04:33 CEST 2005 - jsmeix@suse.de + +- Adjustments in the spec file. + +------------------------------------------------------------------- +Mon Jul 18 16:00:36 CEST 2005 - jsmeix@suse.de + +- Current version 1.7.0 from JPackage.org + +------------------------------------------------------------------- +Mon Feb 21 15:30:10 CET 2005 - skh@suse.de + +- update to version 1.7.0 +- don't use icecream + +------------------------------------------------------------------- +Thu Sep 16 16:09:13 CEST 2004 - skh@suse.de + +- Fix prerequires of javadoc subpackage + +------------------------------------------------------------------- +Sun Sep 5 21:45:14 CEST 2004 - skh@suse.de + +- Initial package created with version 1.6.1 (JPackage 1.5) + diff --git a/apache-commons-beanutils.spec b/apache-commons-beanutils.spec new file mode 100644 index 0000000..3ab1919 --- /dev/null +++ b/apache-commons-beanutils.spec @@ -0,0 +1,97 @@ +# +# spec file for package apache-commons-beanutils +# +# Copyright (c) 2023 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +%define base_name beanutils +%define short_name commons-%{base_name} +Name: apache-commons-beanutils +Version: 1.9.4 +Release: 0 +Summary: Utility methods for accessing and modifying the properties of JavaBeans +License: Apache-2.0 +URL: https://commons.apache.org/beanutils +Source0: http://www.apache.org/dist/commons/%{base_name}/source/%{short_name}-%{version}-src.tar.gz +Source1: http://www.apache.org/dist/commons/%{base_name}/source/%{short_name}-%{version}-src.tar.gz.asc +Patch0: jdk9.patch +Patch1: apache-commons-beanutils-fix-build-version.patch +BuildRequires: ant +BuildRequires: commons-collections +BuildRequires: commons-logging +BuildRequires: fdupes +BuildRequires: javapackages-local >= 6 +BuildRequires: xml-commons-apis +Provides: %{short_name} = %{version}-%{release} +Obsoletes: %{short_name} < %{version}-%{release} +Provides: jakarta-%{short_name} = %{version}-%{release} +Obsoletes: jakarta-%{short_name} < %{version}-%{release} +BuildArch: noarch + +%description +The scope of this package is to create a package of Java utility +methods for accessing and modifying the properties of arbitrary +JavaBeans. No dependencies outside of the JDK are required, so the use +of this package is very lightweight. + +%package javadoc +Summary: Javadoc for jakarta-commons-beanutils + +%description javadoc +The scope of the Jakarta Commons BeanUtils Package is to create a +package of Java utility methods for accessing and modifying the +properties of arbitrary JavaBeans. No dependencies outside of the JDK +are required, so the use of this package is very lightweight. + +This package contains the javadoc documentation for the Jakarta Commons +BeanUtils Package. + +%prep +%setup -q -n %{short_name}-%{version}-src +%patch0 -p1 +%patch1 -p1 +sed -i 's/\r//' *.txt +# bug in ant build +touch README.txt + +%build +export CLASSPATH=%(build-classpath commons-collections commons-logging) +%{ant} -Dbuild.sysclasspath=first dist + +%install +# jars +install -d -m 755 %{buildroot}%{_javadir} +install -m 644 dist/%{short_name}-%{version}.jar %{buildroot}%{_javadir}/%{short_name}.jar +ln -sf %{short_name}.jar %{buildroot}%{_javadir}/%{name}.jar + +# poms +install -d -m 755 %{buildroot}%{_mavenpomdir} +%{mvn_install_pom} pom.xml %{buildroot}%{_mavenpomdir}/%{short_name}.pom +%add_maven_depmap %{short_name}.pom %{short_name}.jar -a "%{short_name}:%{short_name}-core,%{short_name}:%{short_name}-bean-collections" + +# javadoc +install -d -m 755 %{buildroot}%{_javadocdir}/%{name} +cp -pr dist/docs/api/* %{buildroot}%{_javadocdir}/%{name} +%fdupes -s %{buildroot}%{_javadocdir}/%{name} + +%files -f .mfiles +%{_javadir}/%{name}.jar +%license LICENSE.txt NOTICE.txt +%doc RELEASE-NOTES.txt + +%files javadoc +%{_javadocdir}/%{name} + +%changelog diff --git a/commons-beanutils-1.9.4-src.tar.gz b/commons-beanutils-1.9.4-src.tar.gz new file mode 100644 index 0000000..db5a5ca --- /dev/null +++ b/commons-beanutils-1.9.4-src.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:2d46a5ac37000cad57ed338dbc5a0ae08cb924471afb5b3d4cff084afa0c728e +size 412606 diff --git a/commons-beanutils-1.9.4-src.tar.gz.asc b/commons-beanutils-1.9.4-src.tar.gz.asc new file mode 100644 index 0000000..95fd666 --- /dev/null +++ b/commons-beanutils-1.9.4-src.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEtuc9hOpPzEcWYIclP6rSzV7LsxQFAl0+HtQACgkQP6rSzV7L +sxSeOA//WJ8qCJV5F3UGky4Ycp8Ihdb9j3ixZt68dLhcC0URw/aIwprn6F03/UFh +8MFbXrjZtqa2CBJ4G+Af0H7l0ZjQ6bG4VY/tALHhUUdq+jKAHD7nZq61UTkR5wDo +qDYPcazlfpjI+9pZnxe6JeoKL5O5ph3n9uzWnrt0JP56kzY8OU0Y4tNFzSFqCu1H +tKyYBFbCJAAtwMBT5dFF48ExjMGLkIGPveBnef6UtMNoGlT7TH8ixb6NmktZfj8l +oIdRI8Hk+zGpP/xiqTIhs7Z3uZ/kZJXOn6dPWTKsR3tEK8uqA+NCHVtPGMs0/trU +kcyQGtKKoHWk6W5xuEq0BJK+BEdWtEdnvwLFVkow5+i/Y/ezfvnE7bWL1MeYDrYM +pbvuuCGGRkk/XKSCkb81+6W3+ID3lF+4JS85Ny+zPfMH4CqUYNmeYJ5qE8qpRC0M +rxiA0s+nMBWsNVt3PUE36zep1JDnCwacMryITj6g88wsRY8Mo3TU5TLTkoYne4At +9PdCgdDrYMCYJlo5OPPy3k7mrbLBy8J4IfTPjAPzHXpXqvidPHLVGVg/T/QsXJAh +nNG0/2CQhPplJtm0fLQRkLYHA8kp4qvjACQGGu7zW8HliZNYeDdJy9M2LNdWstn6 +xMWPp7UxgvFly8u4WEEk0Yox/EVT4O1Lc8kQgJF2RdU0KOQGaD4= +=yvPn +-----END PGP SIGNATURE----- diff --git a/jdk9.patch b/jdk9.patch new file mode 100644 index 0000000..c557e6a --- /dev/null +++ b/jdk9.patch @@ -0,0 +1,17 @@ +Index: commons-beanutils-1.9.3-src/build.xml +=================================================================== +--- commons-beanutils-1.9.3-src.orig/build.xml ++++ commons-beanutils-1.9.3-src/build.xml +@@ -62,10 +62,10 @@ + + + +- ++ + + +- ++ + + +