commit: 70e304f4a946ded932efc2a9a2f1637053129802 Author: Patrice Clement <monsieurp <AT> gentoo <DOT> org> AuthorDate: Sat Oct 31 17:31:57 2015 +0000 Commit: Patrice Clement <monsieurp <AT> gentoo <DOT> org> CommitDate: Sat Oct 31 17:43:38 2015 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=70e304f4
dev-java/xstream: Version bump. Fixes security bug 497652. Package-Manager: portage-2.2.20.1 Signed-off-by: Patrice Clement <monsieurp <AT> gentoo.org> dev-java/xstream/Manifest | 1 + dev-java/xstream/xstream-1.4.8.ebuild | 56 +++++++++++++++++++++++++++++++++++ 2 files changed, 57 insertions(+) diff --git a/dev-java/xstream/Manifest b/dev-java/xstream/Manifest index 7b2a3d2..5c7dbb5 100644 --- a/dev-java/xstream/Manifest +++ b/dev-java/xstream/Manifest @@ -1 +1,2 @@ +DIST xstream-1.4.8-sources.jar 395464 SHA256 5d956e4527d27420f2d417cd77ffafedad85ee795a59857bbf2be9cc630eace0 SHA512 9fb9ebc6facdc07aecbcee3fbf40ef560bdd42cd8f7c7a3a8e2401be5c4e05ed3370beec653ef06d2fd3aa1acabf8f4ada8dddea27f239d180d66aec0bd905e6 WHIRLPOOL 10f9ad97300397000085e4850baa89a2560bd13431c1668b7e144fe53b0800f546ff56cb7bd373a53ea7ab1ff88bef80260e3d8543543c8df50fc5e56fdd8aa2 DIST xstream-distribution-1.3.1-src.zip 7505723 SHA256 df645ea4e2e16c4a149fb45966ea50d48b54776ead4727837348195daad94f6b SHA512 c8c92879a26599d7444fce0638ba13d185fd3c1f42962b92fe1b984d2ea41f8e434acb6af5613ac9f44354816fb7abc60f751f864f36deb9c2413b0caec5c2ac WHIRLPOOL 13ac006402bbecbf6d3ff9fe30662cc6e3807cdf3a391255f878cea37800842adc929914f2e4aace3a7788294809afb26edd64181f85a7e5dc46f3e1f9c0e9b6 diff --git a/dev-java/xstream/xstream-1.4.8.ebuild b/dev-java/xstream/xstream-1.4.8.ebuild new file mode 100644 index 0000000..41f26ae --- /dev/null +++ b/dev-java/xstream/xstream-1.4.8.ebuild @@ -0,0 +1,56 @@ +# Copyright 1999-2015 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Id$ + +EAPI=5 + +JAVA_PKG_IUSE="doc source" + +inherit java-pkg-2 java-pkg-simple + +DESCRIPTION="A text-processing Java API that serialize objects to XML and back again" +HOMEPAGE="http://x-stream.github.io"; +SRC_URI="http://central.maven.org/maven2/com/thoughtworks/${PN}/${PN}/${PV}/${P}-sources.jar"; +LICENSE="BSD" +SLOT="0" +KEYWORDS="~amd64 ~ppc ~ppc64 ~x86" + +CDEPEND=" + dev-java/kxml:2 + dev-java/xom:0 + dev-java/xpp3:0 + dev-java/cglib:3 + dev-java/dom4j:1 + dev-java/jdom:2 + dev-java/jdom:1.0 + dev-java/joda-time:0 + dev-java/jettison:0" + +RDEPEND=" + ${CDEPEND} + >=virtual/jre-1.6" + +DEPEND=" + ${CDEPEND} + >=virtual/jdk-1.6 + app-arch/unzip" + +JAVA_GENTOO_CLASSPATH=" + xpp3 + xom + kxml-2 + jdom-2 + jdom-1.0 + dom4j-1 + cglib-3 + jettison + joda-time" + +# Two drivers for two very old implementations of StAX. +# StAX has been last-rited from Gentoo as it is now part of the Java 6 JDK. +# See bug 561504. These drivers rely on ancient APIs that aren't maintained +# upstream and may contain security holes. +JAVA_RM_FILES=( + com/thoughtworks/xstream/io/xml/WstxDriver.java + com/thoughtworks/xstream/io/xml/BEAStaxDriver.java +)
