pool/apache-commons-beanutils
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 239880 from Java:packages

Browse Source 
- Cleanup bit with spec-cleaner

- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt

OBS-URL: https://build.opensuse.org/request/show/239880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache-commons-beanutils?expand=0&rev=5
This commit is contained in:
Stephan Kulow 2014-07-10 12:55:27 +00:00 committed by Git OBS Bridge
commit e52f703995
4 changed files with 37 additions and 37 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
apache-commons-beanutils.changes
View File

@ -1,3 +1,19 @@
-------------------------------------------------------------------
Tue Jul 8 11:35:52 UTC 2014 - tchvatal@suse.com
- Cleanup bit with spec-cleaner
-------------------------------------------------------------------
Mon Jul 7 08:04:04 UTC 2014 - dmacvicar@suse.de
- update to 1.9.2
- CVE-2014-3540:
'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt
-------------------------------------------------------------------
Mon Apr 2 13:23:15 UTC 2012 - mvyskocil@suse.cz

52
apache-commons-beanutils.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package apache-commons-beanutils
#
# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -14,36 +14,31 @@
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# icecream 0
%define base_name beanutils
%define short_name commons-%{base_name}
Name: apache-commons-beanutils
Version: 1.8.3
Version: 1.9.2
Release: 0
Summary: Jakarta Commons BeanUtils Package
Summary: Utility methods for accessing and modifying the properties of JavaBeans
License: Apache-2.0
Group: Development/Libraries/Java
Url: http://commons.apache.org/beanutils
Source0: commons-beanutils-%{version}-src.tar.gz
URL: http://commons.apache.org/beanutils
BuildRequires: ant
BuildRequires: commons-collections
BuildRequires: commons-logging
BuildRequires: java-devel >= 1.6.0
BuildRequires: xml-commons-apis
Requires: commons-collections >= 2.0
Requires: commons-logging >= 1.0
BuildArch: noarch
BuildRoot: %{_tmppath}/%{name}-%{version}-build
Provides: %{short_name} = %{version}-%{release}
Obsoletes: %{short_name} < %{version}-%{release}
Provides: jakarta-%{short_name} = %{version}-%{release}
Obsoletes: jakarta-%{short_name} < %{version}-%{release}
BuildRoot: %{_tmppath}/%{name}-%{version}-build
BuildArch: noarch
%description
The scope of this package is to create a package of Java utility
@ -51,9 +46,7 @@ methods for accessing and modifying the properties of arbitrary
JavaBeans. No dependencies outside of the JDK are required, so the use
of this package is very lightweight.
%package javadoc
PreReq: coreutils
Summary: Javadoc for jakarta-commons-beanutils
Group: Development/Libraries/Java
@ -66,11 +59,11 @@ are required, so the use of this package is very lightweight.
This package contains the javadoc documentation for the Jakarta Commons
BeanUtils Package.
%prep
%setup -n %{short_name}-%{version}-src
%setup -q -n %{short_name}-%{version}-src
sed -i 's/\r//' *.txt
# bug in ant build
touch README.txt
%build
export CLASSPATH=%(build-classpath commons-collections commons-logging)
@ -78,36 +71,27 @@ ant -Dbuild.sysclasspath=first dist
%install
# jars
install -d -m 755 $RPM_BUILD_ROOT%{_javadir}
install -m 644 dist/%{short_name}-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}.jar
install -d -m 755 %{buildroot}%{_javadir}
install -m 644 dist/%{short_name}-%{version}.jar %{buildroot}%{_javadir}/%{name}.jar
# main jar created from these, we install them just for safe measure
install -m 644 dist/%{short_name}-bean-collections-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}-bean-collections.jar
install -m 644 dist/%{short_name}-core-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}-core.jar
pushd $RPM_BUILD_ROOT%{_javadir}
pushd %{buildroot}%{_javadir}
for jar in *.jar; do
ln -sf ${jar} `echo $jar| sed "s|apache-||g"`
done
popd # come back from javadir
install -d -m 755 $RPM_BUILD_ROOT%{_mavenpomdir}
install -pm 644 pom.xml $RPM_BUILD_ROOT%{_mavenpomdir}/JPP-%{name}.pom
install -d -m 755 %{buildroot}%{_mavenpomdir}
install -pm 644 pom.xml %{buildroot}%{_mavenpomdir}/JPP-%{name}.pom
# javadoc
install -d -m 755 $RPM_BUILD_ROOT%{_javadocdir}/%{name}
cp -pr dist/docs/api/* $RPM_BUILD_ROOT%{_javadocdir}/%{name}
%clean
rm -rf $RPM_BUILD_ROOT
install -d -m 755 %{buildroot}%{_javadocdir}/%{name}
cp -pr dist/docs/api/* %{buildroot}%{_javadocdir}/%{name}
%files
%defattr(0644,root,root,0755)
%doc *.txt
%doc LICENSE.txt NOTICE.txt RELEASE-NOTES.txt
%{_javadir}/*
%{_mavenpomdir}/JPP-%{name}.pom
# % {_mavendepmapfragdir}/%{name}
%files javadoc
%defattr(0644,root,root,0755)

3
commons-beanutils-1.8.3-src.tar.gz
View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:df6d6a625db8da38b33d018030715130a258c0b493ea39f20c5e8d075b21b4ed
size 383126

3
commons-beanutils-1.9.2-src.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:91fccad3b65f278bad98df1aa8467f2d3df6095f41b2db39d2c12863fb2c0049
size 396910