Accepting request 888788 from Java:packages

3.8.1

OBS-URL: https://build.opensuse.org/request/show/888788
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/maven?expand=0&rev=5

apache-maven-3.6.3-build.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3f126061e5e8166700c6b63a367ac7e78a3b6b296334665c35a4e1e9706f31e4
-size 5188

apache-maven-3.6.3-src.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7c1c990ba64dd4f88688120cc2ec93bf33dd500d2a62ae5cd57bd4b7f6335c07
-size 2762967

apache-maven-3.8.1-build.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4217036830a64d7b39e6fb8a0f3db49d9f952c5395d571ba8a7723a9c948f309
+size 5176

apache-maven-3.8.1-src.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:86dc0df5950bb22dedcab326499531ee9c155016c9a7a3d3f33315becb0c71b1
+size 2763744

maven.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Tue Apr 27 07:25:29 UTC 2021 - Fridrich Strba <fstrba@suse.com>
+
+- Upgrade to upstream version 3.8.1
+  * Security fixes:
+    + CVE-2021-26291 and CVE-2020-13956
+  * Bug:
+    + [MNG-7128] - improve error message when blocked repository
+      defined in build POM
+  * New Feature
+    + [MNG-7116] - Add support for mirror selector on
+      external:http:*
+    + [MNG-7117] - Add support for blocking mirrors
+    + [MNG-7118] - Block external HTTP repositories by default
+  * Dependency upgrade
+    * [MNG-7119] - Upgrade Maven Wagon to 3.4.3
+    * [MNG-7123] - Upgrade Maven Resolver to 1.6.2
+
 -------------------------------------------------------------------
 Sun Mar  1 08:27:38 UTC 2020 - Fridrich Strba <fstrba@suse.com>
 

maven.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package maven
 #
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2021 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,7 +21,7 @@
 %global confdir %{_sysconfdir}/%{name}%{?maven_version_suffix}
 %bcond_with  logback
 Name:           maven
-Version:        3.6.3
+Version:        3.8.1
 Release:        0
 Summary:        Java project management and project comprehension tool
 # maven itself is ASL 2.0
@@ -93,7 +93,7 @@ BuildRequires:  xmvn-subst
 BuildRequires:  mvn(org.apache.maven:maven-parent:pom:)
 Requires:       %{name}-lib = %{version}-%{release}
 Requires(post): aaa_base
-Requires(postun): aaa_base
+Requires(postun):aaa_base
 # maven-lib cannot be noarch because of the position of jansi-native.jar
 #BuildArch:      noarch
 %if %{with logback}