diff options
author | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2022-04-27 01:01:16 +0200 |
---|---|---|
committer | Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org> | 2022-04-27 01:01:19 +0200 |
commit | 54a5918a66e1779eb0abc80ccd003dafa3241665 (patch) | |
tree | 96448e099c9ef9f56f9418f1e20ae72ec855e91a /pcr | |
parent | 29dbfaa0792627e69c3cf6a8bc39295307663579 (diff) | |
download | abslibre-54a5918a66e1779eb0abc80ccd003dafa3241665.tar.gz abslibre-54a5918a66e1779eb0abc80ccd003dafa3241665.tar.bz2 abslibre-54a5918a66e1779eb0abc80ccd003dafa3241665.zip |
pcr: remove log4j-1.2
The 1.2 version of log4j is not only unmaintained / End of life, but it
also has lot of security vulnerabilities[1] including at least one
critical CVE, 4 high CVEs and 1 moderate CVE.
[1]https://logging.apache.org/log4j/1.2/
Link: https://labs.parabola.nu/issues/3261
Reported-by: gap
Signed-off-by: Denis 'GNUtoo' Carikli <GNUtoo@cyberdimension.org>
Diffstat (limited to 'pcr')
-rw-r--r-- | pcr/log4j-1.2/PKGBUILD | 57 | ||||
-rw-r--r-- | pcr/log4j-1.2/apache-log4j-add_missing_classes.patch | 13 | ||||
-rw-r--r-- | pcr/log4j-1.2/apache-log4j-build_fix.patch | 32 | ||||
-rw-r--r-- | pcr/log4j-1.2/apache-log4j-remove_activation_framework.patch | 28 |
4 files changed, 0 insertions, 130 deletions
diff --git a/pcr/log4j-1.2/PKGBUILD b/pcr/log4j-1.2/PKGBUILD deleted file mode 100644 index d71f7346a..000000000 --- a/pcr/log4j-1.2/PKGBUILD +++ /dev/null @@ -1,57 +0,0 @@ -# Maintainer: Omar Vega Ramos <ovruni@gnu.org.pe> - -_pkgname=log4j -pkgname=${_pkgname}-1.2 -pkgver=1.2.17 -pkgrel=1 -pkgdesc="Logging library for java" -arch=('any') -url="http://logging.apache.org/log4j/1.2/" -license=('APACHE') -depends=('java-runtime') -makedepends=('apache-ant' 'javamail' 'java-geronimo-jms' 'jh') -source=("https://archive.apache.org/dist/logging/${_pkgname}/${pkgver}/${_pkgname}-${pkgver}.tar.gz" - "apache-log4j-remove_activation_framework.patch" - "apache-log4j-add_missing_classes.patch" - "apache-log4j-build_fix.patch") -md5sums=('8218714e41ee0c6509dcfeafa2e1f53f' - '4417d091786330e001dbaac991e17bfe' - '36450de9f2659c813b7edb8185545f4c' - 'f1a4cf990676af4726facad677ebe801') - -prepare() { - cd "${srcdir}/apache-${_pkgname}-${pkgver}" - patch -Np1 -i "${srcdir}/apache-log4j-remove_activation_framework.patch" - patch -Np1 -i "${srcdir}/apache-log4j-add_missing_classes.patch" - patch -Np1 -i "${srcdir}/apache-log4j-build_fix.patch" - rm -rv {contribs,site,tests} - rm -v $(find . -name \*.jar) -} - -build() { - cd "${srcdir}/apache-${_pkgname}-${pkgver}" - ant clean jar javadoc \ - -Djavamail.jar=/usr/share/java/javax.mail.jar \ - -Dgeronimo-jms.jar=/usr/share/java/geronimo-jms_1.1_spec.jar -} - -package() { - cd "${srcdir}/apache-${_pkgname}-${pkgver}" - - # Install license file - install -Dm644 LICENSE "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE.txt" - - # Install documentation - install -d "${pkgdir}/usr/share/doc/${pkgname}" - cp -r "docs/api" "${pkgdir}/usr/share/doc/${pkgname}" - cp -r "examples" "${pkgdir}/usr/share/doc/${pkgname}" - - # Install Maven artifacts - export DESTDIR=${pkgdir} - jh mvn-install ${_pkgname} ${_pkgname} ${pkgver} \ - "pom.xml" \ - "dist/lib/${_pkgname}-${pkgver}.jar" \ - "${_pkgname}-1.2.jar" - ln -s "/usr/share/java/${_pkgname}-1.2.jar" \ - "${pkgdir}/usr/share/java/${_pkgname}-${pkgver}.jar" -} diff --git a/pcr/log4j-1.2/apache-log4j-add_missing_classes.patch b/pcr/log4j-1.2/apache-log4j-add_missing_classes.patch deleted file mode 100644 index 215aabd3e..000000000 --- a/pcr/log4j-1.2/apache-log4j-add_missing_classes.patch +++ /dev/null @@ -1,13 +0,0 @@ ---- apache-log4j-1.2.17.orig/build.xml 2012-05-06 06:00:28.000000000 -0500 -+++ apache-log4j-1.2.17/build.xml 2015-09-19 12:28:05.401524127 -0500 -@@ -430,7 +430,9 @@ - ${stem}/or/*.class, - ${stem}/or/sax/*.class, - ${stem}/or/jms/*.class, -- ${stem}/config/*.class" -+ ${stem}/config/*.class -+ ${stem}/pattern/*.class -+ ${stem}/rewrite/*.class" - excludes="**/UnitTest**"> - <manifest> - <section name="org/apache/log4j"> diff --git a/pcr/log4j-1.2/apache-log4j-build_fix.patch b/pcr/log4j-1.2/apache-log4j-build_fix.patch deleted file mode 100644 index b59472b47..000000000 --- a/pcr/log4j-1.2/apache-log4j-build_fix.patch +++ /dev/null @@ -1,32 +0,0 @@ ---- apache-log4j-1.2.17.orig/build.xml 2012-05-06 06:00:28.000000000 -0500 -+++ apache-log4j-1.2.17/build.xml 2015-09-19 12:36:54.788784418 -0500 -@@ -167,12 +167,6 @@ - <and> - <available classname="javax.management.MBeanInfo" - classpath="${jmx.jar}"/> -- <available classname="com.sun.jdmk.comm.HtmlAdaptorServer"> -- <classpath> -- <pathelement location="${jmx.jar}"/> -- <pathelement location="${javaee-api.jar}"/> -- </classpath> -- </available> - </and> - </condition> - </target> -@@ -497,7 +491,6 @@ - protected="true" - author="true" - use="true" -- overview="${docs.dest}/overview.html" - doctitle="log4j version ${version}<br>API Specification" - windowtitle="Log4j Version ${version}" - header='<b>Log4j ${version}</b><!-- Licensed to the Apache Software Foundation (ASF) under one or more -@@ -517,8 +510,6 @@ - -->' - bottom="Copyright 2000-2007 Apache Software Foundation."> - -- <link href="http://java.sun.com/j2se/1.3/docs/api/"/> -- <link href="http://java.sun.com/j2ee/sdk_1.3/techdocs/api/"/> - <classpath refid="compile.classpath"/> - </javadoc> - diff --git a/pcr/log4j-1.2/apache-log4j-remove_activation_framework.patch b/pcr/log4j-1.2/apache-log4j-remove_activation_framework.patch deleted file mode 100644 index 662731cc8..000000000 --- a/pcr/log4j-1.2/apache-log4j-remove_activation_framework.patch +++ /dev/null @@ -1,28 +0,0 @@ ---- apache-log4j-1.2.17.orig/build.xml 2012-05-06 06:00:28.000000000 -0500 -+++ apache-log4j-1.2.17/build.xml 2015-09-19 12:32:07.650680465 -0500 -@@ -118,7 +118,6 @@ - <path id="compile.classpath"> - <pathelement location="${build.home}/classes"/> - <pathelement location="${javamail.jar}"/> -- <pathelement location="${activation.jar}"/> - <pathelement location="${jaxp.jaxp.jar}"/> - <pathelement location="${jms.jar}"/> - <pathelement location="${jmx.jar}"/> ---- apache-log4j-1.2.17.orig/tests/build.xml 2012-05-06 06:00:11.000000000 -0500 -+++ apache-log4j-1.2.17/tests/build.xml 2015-09-19 12:32:58.297072814 -0500 -@@ -35,7 +35,6 @@ - <property name="checkstyle.version" value="4.1"/> - <property name="checkstyle.jar" location="${m2_repo}/checkstyle/checkstyle/${checkstyle.version}/checkstyle-${checkstyle.version}.jar"/> - <property name="javamail.jar" location="${m2_repo}/javax/mail/mail/1.4.3/mail-1.4.3.jar"/> -- <property name="activation.jar" location="${m2_repo}/javax/activation/activation/1.1/activation-1.1.jar"/> - <property name="junit.version" value="3.8.1"/> - <property name="junit.jar" location="${m2_repo}/junit/junit/${junit.version}/junit-${junit.version}.jar"/> - -@@ -70,7 +69,6 @@ - <pathelement location="${clover.jar}"/> - <pathelement location="${junit.jar}"/> - <pathelement location="${javamail.jar}"/> -- <pathelement location="${activation.jar}"/> - <pathelement path="${java.class.path}"/> - </path> - |