Opened 11 years ago

Closed 11 years ago

#38199 closed update (fixed)

maven3 @3.0.5 Provide update

Reported by: m@… Owned by: blair (Blair Zajac)
Priority: Normal Milestone:
Component: ports Version: 2.1.3
Keywords: Cc: gk5885@…
Port: maven3

Description

Apache ​Maven 3.0.5 is a maintenance release to fix security issue ​CVE-2013-0253 Apache Maven 3.0.4.

Please provide that version.

Attachments (1)

Portfile.diff​ (1.4 KB) - added by ci42 11 years ago.

Download all attachments as: .zip

Change History (4)

comment:1 Changed 11 years ago by ci42

Cc: blair@… removed
Keywords: security removed
Owner: changed from macports-tickets@… to blair@…

Changed 11 years ago by ci42

Attachment: Portfile.diff​ added

comment:2 Changed 11 years ago by ci42

See the attached patch​.

Included are the following changes:

  • Upgrade to version 3.0.5
  • fix master_sites
  • use more recent checksums algorithms
  • set supported_archs to noarch
  • make java only a runtime dependency not a buildtime dependency
  • instead of setting the build.cmd to true override and use an empty build phase

comment:3 Changed 11 years ago by blair (Blair Zajac)

Resolution: → fixed
Status: new → closed

Thanks, fixed in r103425, r103426, r103427, r103428, r103429.

BTW, I kept the md5 and sha1 checksums since upstream provides them and it's an additional check that MacPorts is providing the expected package.

Note: See TracTickets for help on using tickets.