You are viewing a plain text version of this content. The canonical link for it is here.
Posted to scm@geronimo.apache.org by dw...@apache.org on 2008/08/25 20:41:24 UTC

svn commit: r688819 - in /geronimo/server/branches/2.1: ./ repository/ repository/org/apache/activemq/ repository/org/apache/activemq/activemq-core/ repository/org/apache/activemq/activemq-core/4.1.2-G647819/

Author: dwoods
Date: Mon Aug 25 11:41:23 2008
New Revision: 688819

URL: http://svn.apache.org/viewvc?rev=688819&view=rev
Log:
GERONIMO-4262 Include patched build of AMQ 4.1.2 to resolve AMQ-1272 security exposure

Added:
    geronimo/server/branches/2.1/repository/org/apache/activemq/
    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/
    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/
    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar   (with props)
    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
Modified:
    geronimo/server/branches/2.1/pom.xml
    geronimo/server/branches/2.1/repository/pom.xml

Modified: geronimo/server/branches/2.1/pom.xml
URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/pom.xml?rev=688819&r1=688818&r2=688819&view=diff
==============================================================================
--- geronimo/server/branches/2.1/pom.xml (original)
+++ geronimo/server/branches/2.1/pom.xml Mon Aug 25 11:41:23 2008
@@ -649,7 +649,7 @@
             <dependency>
                 <groupId>org.apache.activemq</groupId>
                 <artifactId>activemq-core</artifactId>
-                <version>4.1.2</version>
+                <version>4.1.2-G647819</version>
             </dependency>
 
             <dependency>

Added: geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar?rev=688819&view=auto
==============================================================================
Binary file - no diff available.

Propchange: geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
------------------------------------------------------------------------------
    svn:mime-type = application/octet-stream

Added: geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5?rev=688819&view=auto
==============================================================================
--- geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5 (added)
+++ geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5 Mon Aug 25 11:41:23 2008
@@ -0,0 +1 @@
+13e3f5c136c0b877c2303c500d8589d7  activemq-core-4.1.2-G647819.jar

Added: geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1?rev=688819&view=auto
==============================================================================
--- geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1 (added)
+++ geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1 Mon Aug 25 11:41:23 2008
@@ -0,0 +1 @@
+f2f0c3a062342b2d2c2df53f0f7f4359cb00bf02  activemq-core-4.1.2-G647819.jar

Modified: geronimo/server/branches/2.1/repository/pom.xml
URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/pom.xml?rev=688819&r1=688818&r2=688819&view=diff
==============================================================================
--- geronimo/server/branches/2.1/repository/pom.xml (original)
+++ geronimo/server/branches/2.1/repository/pom.xml Mon Aug 25 11:41:23 2008
@@ -148,6 +148,12 @@
             <groupId>org.apache.ant</groupId>
             <artifactId>ant-launcher</artifactId>
         </dependency>
+
+        <!-- See GERONIMO-4262 -->
+        <dependency>
+            <groupId>org.apache.activemq</groupId>
+            <artifactId>activemq-core</artifactId>
+        </dependency>
     </dependencies>
 
     <repositories>



Re: svn commit: r688819 - in /geronimo/server/branches/2.1: ./ repository/ repository/org/apache/activemq/ repository/org/apache/activemq/activemq-core/ repository/org/apache/activemq/activemq-core/4.1.2-G647819/

Posted by Donald Woods <dw...@apache.org>.
I updated AMQ-1272 with the patch for the 4.1 branch yesterday.

I'll update our svn to include the patch file and build instructions 
today.  Thanks for pointing that out.


-Donald


Kevan Miller wrote:
> Donald,
> There needs to be a corresponding patch file plus a 
> description/instructions for building. Also, the patch should be 
> submitted to the ActiveMQ community.
> 
> --kevan
> On Aug 25, 2008, at 2:41 PM, dwoods@apache.org 
> <ma...@apache.org> wrote:
> 
>> Author: dwoods
>> Date: Mon Aug 25 11:41:23 2008
>> New Revision: 688819
>>
>> URL: http://svn.apache.org/viewvc?rev=688819&view=rev 
>> <http://svn.apache.org/viewvc?rev=688819&view=rev>
>> Log:
>> GERONIMO-4262 Include patched build of AMQ 4.1.2 to resolve AMQ-1272 
>> security exposure
>>
>> Added:
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar 
>>   (with props)
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
>>    geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
>> Modified:
>>    geronimo/server/branches/2.1/pom.xml
>>    geronimo/server/branches/2.1/repository/pom.xml
>>
>> Modified: geronimo/server/branches/2.1/pom.xml
>> URL: 
>> http://svn.apache.org/viewvc/geronimo/server/branches/2.1/pom.xml?rev=688819&r1=688818&r2=688819&view=diff 
>> <http://svn.apache.org/viewvc/geronimo/server/branches/2.1/pom.xml?rev=688819&r1=688818&r2=688819&view=diff>
>> ==============================================================================
>> --- geronimo/server/branches/2.1/pom.xml (original)
>> +++ geronimo/server/branches/2.1/pom.xml Mon Aug 25 11:41:23 2008
>> @@ -649,7 +649,7 @@
>>             <dependency>
>>                 <groupId>org.apache.activemq</groupId>
>>                 <artifactId>activemq-core</artifactId>
>> -                <version>4.1.2</version>
>> +                <version>4.1.2-G647819</version>
>>             </dependency>
>>
>>             <dependency>
>>
>> Added: 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
>> URL: 
>> http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar?rev=688819&view=auto 
>> <http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar?rev=688819&view=auto>
>> ==============================================================================
>> Binary file - no diff available.
>>
>> Propchange: 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
>> ------------------------------------------------------------------------------
>>    svn:mime-type = application/octet-stream
>>
>> Added: 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
>> URL: 
>> http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5?rev=688819&view=auto 
>> <http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5?rev=688819&view=auto>
>> ==============================================================================
>> --- 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5 
>> (added)
>> +++ 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5 
>> Mon Aug 25 11:41:23 2008
>> @@ -0,0 +1 @@
>> +13e3f5c136c0b877c2303c500d8589d7  activemq-core-4.1.2-G647819.jar
>>
>> Added: 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
>> URL: 
>> http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1?rev=688819&view=auto 
>> <http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1?rev=688819&view=auto>
>> ==============================================================================
>> --- 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1 
>> (added)
>> +++ 
>> geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1 
>> Mon Aug 25 11:41:23 2008
>> @@ -0,0 +1 @@
>> +f2f0c3a062342b2d2c2df53f0f7f4359cb00bf02  activemq-core-4.1.2-G647819.jar
>>
>> Modified: geronimo/server/branches/2.1/repository/pom.xml
>> URL: 
>> http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/pom.xml?rev=688819&r1=688818&r2=688819&view=diff 
>> <http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/pom.xml?rev=688819&r1=688818&r2=688819&view=diff>
>> ==============================================================================
>> --- geronimo/server/branches/2.1/repository/pom.xml (original)
>> +++ geronimo/server/branches/2.1/repository/pom.xml Mon Aug 25 
>> 11:41:23 2008
>> @@ -148,6 +148,12 @@
>>             <groupId>org.apache.ant</groupId>
>>             <artifactId>ant-launcher</artifactId>
>>         </dependency>
>> +
>> +        <!-- See GERONIMO-4262 -->
>> +        <dependency>
>> +            <groupId>org.apache.activemq</groupId>
>> +            <artifactId>activemq-core</artifactId>
>> +        </dependency>
>>     </dependencies>
>>
>>     <repositories>
>>
>>
> 

Re: svn commit: r688819 - in /geronimo/server/branches/2.1: ./ repository/ repository/org/apache/activemq/ repository/org/apache/activemq/activemq-core/ repository/org/apache/activemq/activemq-core/4.1.2-G647819/

Posted by Kevan Miller <ke...@gmail.com>.
Donald,
There needs to be a corresponding patch file plus a description/ 
instructions for building. Also, the patch should be submitted to the  
ActiveMQ community.

--kevan
On Aug 25, 2008, at 2:41 PM, dwoods@apache.org wrote:

> Author: dwoods
> Date: Mon Aug 25 11:41:23 2008
> New Revision: 688819
>
> URL: http://svn.apache.org/viewvc?rev=688819&view=rev
> Log:
> GERONIMO-4262 Include patched build of AMQ 4.1.2 to resolve AMQ-1272  
> security exposure
>
> Added:
>    geronimo/server/branches/2.1/repository/org/apache/activemq/
>    geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/
>    geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/
>    geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar   (with  
> props)
>    geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
>    geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
> Modified:
>    geronimo/server/branches/2.1/pom.xml
>    geronimo/server/branches/2.1/repository/pom.xml
>
> Modified: geronimo/server/branches/2.1/pom.xml
> URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/pom.xml?rev=688819&r1=688818&r2=688819&view=diff
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> ======================================================================
> --- geronimo/server/branches/2.1/pom.xml (original)
> +++ geronimo/server/branches/2.1/pom.xml Mon Aug 25 11:41:23 2008
> @@ -649,7 +649,7 @@
>             <dependency>
>                 <groupId>org.apache.activemq</groupId>
>                 <artifactId>activemq-core</artifactId>
> -                <version>4.1.2</version>
> +                <version>4.1.2-G647819</version>
>             </dependency>
>
>             <dependency>
>
> Added: geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
> URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar?rev=688819&view=auto
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> ======================================================================
> Binary file - no diff available.
>
> Propchange: geronimo/server/branches/2.1/repository/org/apache/ 
> activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar
> ------------------------------------------------------------------------------
>    svn:mime-type = application/octet-stream
>
> Added: geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5
> URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5?rev=688819&view=auto
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> ======================================================================
> --- geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5  
> (added)
> +++ geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.md5 Mon  
> Aug 25 11:41:23 2008
> @@ -0,0 +1 @@
> +13e3f5c136c0b877c2303c500d8589d7  activemq-core-4.1.2-G647819.jar
>
> Added: geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1
> URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/org/apache/activemq/activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1?rev=688819&view=auto
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> ======================================================================
> --- geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1  
> (added)
> +++ geronimo/server/branches/2.1/repository/org/apache/activemq/ 
> activemq-core/4.1.2-G647819/activemq-core-4.1.2-G647819.jar.sha1 Mon  
> Aug 25 11:41:23 2008
> @@ -0,0 +1 @@
> +f2f0c3a062342b2d2c2df53f0f7f4359cb00bf02  activemq-core-4.1.2- 
> G647819.jar
>
> Modified: geronimo/server/branches/2.1/repository/pom.xml
> URL: http://svn.apache.org/viewvc/geronimo/server/branches/2.1/repository/pom.xml?rev=688819&r1=688818&r2=688819&view=diff
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> = 
> ======================================================================
> --- geronimo/server/branches/2.1/repository/pom.xml (original)
> +++ geronimo/server/branches/2.1/repository/pom.xml Mon Aug 25  
> 11:41:23 2008
> @@ -148,6 +148,12 @@
>             <groupId>org.apache.ant</groupId>
>             <artifactId>ant-launcher</artifactId>
>         </dependency>
> +
> +        <!-- See GERONIMO-4262 -->
> +        <dependency>
> +            <groupId>org.apache.activemq</groupId>
> +            <artifactId>activemq-core</artifactId>
> +        </dependency>
>     </dependencies>
>
>     <repositories>
>
>