Name: jackson-databind Version: 2.7.6 %define subrel 2 Release: %mkrel 1 Group: Development/Java Summary: General data-binding package for Jackson (2.x) License: ASL 2.0 and LGPLv2+ URL: http://wiki.fasterxml.com/JacksonHome Source0: https://github.com/FasterXML/jackson-databind/archive/%{name}-%{version}.tar.gz Patch0: CVE-2017-7525.patch Patch1: CVE-2017-15095.patch BuildRequires: maven-local BuildRequires: mvn(com.fasterxml.jackson:jackson-parent:pom:) BuildRequires: mvn(com.fasterxml.jackson.core:jackson-annotations) >= 2.4.1 BuildRequires: mvn(com.fasterxml.jackson.core:jackson-core) >= 2.4.1 BuildRequires: mvn(com.google.guava:guava) BuildRequires: mvn(com.google.code.maven-replacer-plugin:replacer) BuildRequires: mvn(org.powermock:powermock-api-mockito) BuildRequires: mvn(org.powermock:powermock-module-junit4) BuildArch: noarch %description General data-binding functionality for Jackson: works on core streaming API. %package javadoc Summary: Javadoc for %{name} %description javadoc This package contains javadoc for %{name}. %prep %setup -q -n %{name}-%{name}-%{version} %patch0 -p1 %patch1 cp -p src/main/resources/META-INF/LICENSE . cp -p src/main/resources/META-INF/NOTICE . sed -i 's/\r//' LICENSE NOTICE # unavailable test deps %pom_remove_dep javax.measure:jsr-275 rm src/test/java/com/fasterxml/jackson/databind/introspect/NoClassDefFoundWorkaroundTest.java %pom_xpath_remove pom:classpathDependencyExcludes %pom_xpath_inject "pom:plugin[pom:artifactId='maven-javadoc-plugin']/pom:configuration" "<additionalparam>-Xdoclint:none</additionalparam>" %pom_xpath_remove pom:failOnError # org.powermock.reflect.exceptions.FieldNotFoundException: Field 'fTestClass' was not found in class org.junit.internal.runners.MethodValidator. rm src/test/java/com/fasterxml/jackson/databind/type/TestTypeFactoryWithClassLoader.java # Off test that require connection with the web rm src/test/java/com/fasterxml/jackson/databind/ser/TestJdkTypes.java \ src/test/java/com/fasterxml/jackson/databind/deser/TestJdkTypes.java \ src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java %mvn_file : %{name} %build %mvn_build -- -Dmaven.test.failure.ignore=true %install %mvn_install %files -f .mfiles %doc README.md release-notes/* %license LICENSE NOTICE %files javadoc -f .mfiles-javadoc %license LICENSE NOTICE %changelog * Sat Nov 04 2017 daviddavid <daviddavid> 2.7.6-1.2.mga6 + Revision: 1175768 - add patch to fix CVE-2017-15095 (mga#21978) - Backport a patch to fix CVE-2017-7525 (mga#21428) * Fri May 12 2017 neoclust <neoclust> 2.7.6-1.mga6 + Revision: 1100585 - New version 2.7.6 * Wed Mar 02 2016 neoclust <neoclust> 2.6.3-3.mga6 + Revision: 981891 - Second rebuild of the java stack * Tue Feb 23 2016 neoclust <neoclust> 2.6.3-2.mga6 + Revision: 976494 - First rebuild of the java stack - sync package jackson-databind with fedora + umeabot <umeabot> - Mageia 6 Mass Rebuild * Thu Dec 25 2014 pterjan <pterjan> 2.4.3-4.mga5 + Revision: 805701 - Clean rebuild - Restore - 2.4.3 - Sync with fedora + sander85 <sander85> - Depends on broken java stack + umeabot <umeabot> - Second Mageia 5 Mass Rebuild - Mageia 5 Mass Rebuild + tv <tv> - rebuild for missing pythoneggs deps * Tue Oct 22 2013 umeabot <umeabot> 2.2.2-4.mga4 + Revision: 541324 - Mageia 4 Mass Rebuild * Fri Oct 11 2013 dmorgan <dmorgan> 2.2.2-3.mga4 + Revision: 495504 - imported package jackson-databind * Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jul 22 2013 gil cattaneo <puntogil@libero.it> 2.2.2-2 - review fixes * Tue Jul 16 2013 gil cattaneo <puntogil@libero.it> 2.2.2-1 - 2.2.2 - renamed jackson-databind * Tue May 07 2013 gil cattaneo <puntogil@libero.it> 2.2.1-1 - 2.2.1 * Wed Oct 24 2012 gil cattaneo <puntogil@libero.it> 2.1.0-1 - update to 2.1.0 - renamed jackson2-databind * Thu Sep 13 2012 gil cattaneo <puntogil@libero.it> 2.0.6-1 - initial rpm