Accepting request 239880 from Java:packages

- Cleanup bit with spec-cleaner

- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt

OBS-URL: https://build.opensuse.org/request/show/239880
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/apache-commons-beanutils?expand=0&rev=5

apache-commons-beanutils.changes

@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Tue Jul  8 11:35:52 UTC 2014 - tchvatal@suse.com
+
+- Cleanup bit with spec-cleaner
+
+-------------------------------------------------------------------
+Mon Jul  7 08:04:04 UTC 2014 - dmacvicar@suse.de
+
+- update to 1.9.2
+- CVE-2014-3540:
+  'class' property is exposed, potentially leading to RCE (bnc#885963)
+- for full changelog, see
+  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
+  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
+  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt
+
 -------------------------------------------------------------------
 Mon Apr  2 13:23:15 UTC 2012 - mvyskocil@suse.cz
 

apache-commons-beanutils.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package apache-commons-beanutils
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -14,36 +14,31 @@
 
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
-# icecream 0
+
 
 %define base_name	beanutils
 %define short_name	commons-%{base_name}
-
 Name:           apache-commons-beanutils
-Version:        1.8.3
+Version:        1.9.2
 Release:        0
-Summary:        Jakarta Commons BeanUtils Package
+Summary:        Utility methods for accessing and modifying the properties of JavaBeans
 License:        Apache-2.0
 Group:          Development/Libraries/Java
+Url:            http://commons.apache.org/beanutils
 Source0:        commons-beanutils-%{version}-src.tar.gz
-URL:            http://commons.apache.org/beanutils
-
 BuildRequires:  ant
 BuildRequires:  commons-collections
 BuildRequires:  commons-logging
 BuildRequires:  java-devel >= 1.6.0
 BuildRequires:  xml-commons-apis
-
 Requires:       commons-collections >= 2.0
 Requires:       commons-logging >= 1.0
-
-BuildArch:      noarch
-BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-
 Provides:       %{short_name} = %{version}-%{release}
 Obsoletes:      %{short_name} < %{version}-%{release}
 Provides:       jakarta-%{short_name} = %{version}-%{release}
 Obsoletes:      jakarta-%{short_name} < %{version}-%{release}
+BuildRoot:      %{_tmppath}/%{name}-%{version}-build
+BuildArch:      noarch
 
 %description
 The scope of this package is to create a package of Java utility
@@ -51,9 +46,7 @@ methods for accessing and modifying the properties of arbitrary
 JavaBeans.  No dependencies outside of the JDK are required, so the use
 of this package is very lightweight.
 
-
 %package javadoc
-PreReq:         coreutils
 Summary:        Javadoc for jakarta-commons-beanutils
 Group:          Development/Libraries/Java
 
@@ -66,11 +59,11 @@ are required, so the use of this package is very lightweight.
 This package contains the javadoc documentation for the Jakarta Commons
 BeanUtils Package.
 
-
-
 %prep
-%setup -n %{short_name}-%{version}-src
+%setup -q -n %{short_name}-%{version}-src
 sed -i 's/\r//' *.txt
+# bug in ant build
+touch README.txt
 
 %build
 export CLASSPATH=%(build-classpath commons-collections commons-logging)
@@ -78,36 +71,27 @@ ant -Dbuild.sysclasspath=first dist
 
 %install
 # jars
-install -d -m 755 $RPM_BUILD_ROOT%{_javadir}
+install -d -m 755 %{buildroot}%{_javadir}
-install -m 644 dist/%{short_name}-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}.jar
+install -m 644 dist/%{short_name}-%{version}.jar %{buildroot}%{_javadir}/%{name}.jar
 
-# main jar created from these, we install them just for safe measure
+pushd %{buildroot}%{_javadir}
-install -m 644 dist/%{short_name}-bean-collections-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}-bean-collections.jar
-install -m 644 dist/%{short_name}-core-%{version}.jar $RPM_BUILD_ROOT%{_javadir}/%{name}-core.jar
-
-pushd $RPM_BUILD_ROOT%{_javadir}
 for jar in *.jar; do
     ln -sf ${jar} `echo $jar| sed "s|apache-||g"`
 done
 popd # come back from javadir
 
-install -d -m 755 $RPM_BUILD_ROOT%{_mavenpomdir}
+install -d -m 755 %{buildroot}%{_mavenpomdir}
-install -pm 644 pom.xml $RPM_BUILD_ROOT%{_mavenpomdir}/JPP-%{name}.pom
+install -pm 644 pom.xml %{buildroot}%{_mavenpomdir}/JPP-%{name}.pom
 
 # javadoc
-install -d -m 755 $RPM_BUILD_ROOT%{_javadocdir}/%{name}
+install -d -m 755 %{buildroot}%{_javadocdir}/%{name}
-cp -pr dist/docs/api/* $RPM_BUILD_ROOT%{_javadocdir}/%{name}
+cp -pr dist/docs/api/* %{buildroot}%{_javadocdir}/%{name}
-
-%clean
-rm -rf $RPM_BUILD_ROOT
-
 
 %files
 %defattr(0644,root,root,0755)
-%doc *.txt
+%doc LICENSE.txt NOTICE.txt RELEASE-NOTES.txt
 %{_javadir}/*
 %{_mavenpomdir}/JPP-%{name}.pom
-# % {_mavendepmapfragdir}/%{name}
 
 %files javadoc
 %defattr(0644,root,root,0755)

commons-beanutils-1.8.3-src.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:df6d6a625db8da38b33d018030715130a258c0b493ea39f20c5e8d075b21b4ed
-size 383126

commons-beanutils-1.9.2-src.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:91fccad3b65f278bad98df1aa8467f2d3df6095f41b2db39d2c12863fb2c0049
+size 396910