You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicemix.apache.org by ff...@apache.org on 2020/02/06 16:05:30 UTC
[servicemix-bundles] branch master updated: [SM-4315]Upgrade
spring-batch from 3.0.8 to 3.0.10 to address CVE-2019-3774
This is an automated email from the ASF dual-hosted git repository.
ffang pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/servicemix-bundles.git
The following commit(s) were added to refs/heads/master by this push:
new d24d9ce [SM-4315]Upgrade spring-batch from 3.0.8 to 3.0.10 to address CVE-2019-3774
d24d9ce is described below
commit d24d9ce23788ee33d5bfc4f20dd081818b6dc070
Author: Freeman Fang <fr...@gmail.com>
AuthorDate: Thu Feb 6 11:05:15 2020 -0500
[SM-4315]Upgrade spring-batch from 3.0.8 to 3.0.10 to address CVE-2019-3774
---
pom.xml | 1 +
spring-batch-core-3.0.10.RELEASE/pom.xml | 192 +++++++++++++++++++++
.../src/main/resources/OSGI-INF/bundle.info | 13 ++
3 files changed, 206 insertions(+)
diff --git a/pom.xml b/pom.xml
index a9f60b0..630b98e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -43,6 +43,7 @@
<modules>
<module>spring-batch-core-4.0.2.RELEASE</module>
+ <module>spring-batch-core-3.0.10.RELEASE</module>
</modules>
</project>
diff --git a/spring-batch-core-3.0.10.RELEASE/pom.xml b/spring-batch-core-3.0.10.RELEASE/pom.xml
new file mode 100644
index 0000000..2bd363f
--- /dev/null
+++ b/spring-batch-core-3.0.10.RELEASE/pom.xml
@@ -0,0 +1,192 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
+
+ <!--
+
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+ -->
+
+ <modelVersion>4.0.0</modelVersion>
+
+ <parent>
+ <groupId>org.apache.servicemix.bundles</groupId>
+ <artifactId>bundles-pom</artifactId>
+ <version>13</version>
+ <relativePath>../bundles-pom/pom.xml</relativePath>
+ </parent>
+
+ <groupId>org.apache.servicemix.bundles</groupId>
+ <artifactId>org.apache.servicemix.bundles.spring-batch-core</artifactId>
+ <version>3.0.10.RELEASE_1-SNAPSHOT</version>
+ <packaging>bundle</packaging>
+ <name>Apache ServiceMix :: Bundles :: ${pkgArtifactId}</name>
+
+ <scm>
+ <connection>scm:git:https://gitbox.apache.org/repos/asf/servicemix-bundles.git</connection>
+ <developerConnection>scm:git:https://gitbox.apache.org/repos/asf/servicemix-bundles.git</developerConnection>
+ <url>https://gitbox.apache.org/repos/asf?p=servicemix-bundles.git</url>
+ <tag>HEAD</tag>
+ </scm>
+
+ <properties>
+ <pkgGroupId>org.springframework.batch</pkgGroupId>
+ <pkgArtifactId>spring-batch-core</pkgArtifactId>
+ <pkgVersion>3.0.10.RELEASE</pkgVersion>
+ <servicemix.osgi.export.pkg>
+ org.springframework.batch.core
+ </servicemix.osgi.export.pkg>
+ <servicemix.osgi.import.pkg>
+ com.fasterxml.jackson.core.type;resolution:=optional,
+ com.fasterxml.jackson.databind;resolution:=optional,
+ com.thoughtworks.xstream;resolution:=optional,
+ com.thoughtworks.xstream.converters.reflection;resolution:=optional,
+ com.thoughtworks.xstream.io;resolution:=optional,
+ com.thoughtworks.xstream.io.json;resolution:=optional,
+ javax.annotation,
+ javax.batch.api;resolution:=optional,
+ javax.batch.api.chunk;resolution:=optional,
+ javax.batch.api.chunk.listener;resolution:=optional,
+ javax.batch.api.listener;resolution:=optional,
+ javax.batch.api.partition;resolution:=optional,
+ javax.batch.operations;resolution:=optional,
+ javax.batch.runtime;resolution:=optional,
+ javax.batch.runtime.context;resolution:=optional,
+ javax.sql,
+ org.aopalliance.aop;resolution:=optional,
+ org.aopalliance.intercept;resolution:=optional,
+ org.apache.commons.logging;resolution:=optional,
+ org.aspectj.lang.annotation;resolution:=optional,
+ org.springframework.aop;resolution:=optional,
+ org.springframework.aop.framework;resolution:=optional,
+ org.springframework.aop.scope;resolution:=optional,
+ org.springframework.aop.support;resolution:=optional,
+ org.springframework.aop.target;resolution:=optional,
+ org.springframework.batch.item;resolution:=optional,
+ org.springframework.batch.item.adapter;resolution:=optional,
+ org.springframework.batch.item.database.support;resolution:=optional,
+ org.springframework.batch.item.support;resolution:=optional,
+ org.springframework.batch.item.util;resolution:=optional,
+ org.springframework.batch.jsr.item;resolution:=optional,
+ org.springframework.batch.jsr.repeat;resolution:=optional,
+ org.springframework.batch.repeat;resolution:=optional,
+ org.springframework.batch.repeat.context;resolution:=optional,
+ org.springframework.batch.repeat.exception;resolution:=optional,
+ org.springframework.batch.repeat.policy;resolution:=optional,
+ org.springframework.batch.repeat.support;resolution:=optional,
+ org.springframework.batch.support;resolution:=optional,
+ org.springframework.batch.support.transaction;resolution:=optional,
+ org.springframework.beans;resolution:=optional,
+ org.springframework.beans.factory;resolution:=optional,
+ org.springframework.beans.factory.access;resolution:=optional,
+ org.springframework.beans.factory.annotation;resolution:=optional,
+ org.springframework.beans.factory.config;resolution:=optional,
+ org.springframework.beans.factory.parsing;resolution:=optional,
+ org.springframework.beans.factory.support;resolution:=optional,
+ org.springframework.beans.factory.xml;resolution:=optional,
+ org.springframework.classify;resolution:=optional,
+ org.springframework.context;resolution:=optional,
+ org.springframework.context.access;resolution:=optional,
+ org.springframework.context.annotation;resolution:=optional,
+ org.springframework.context.event;resolution:=optional,
+ org.springframework.context.expression;resolution:=optional,
+ org.springframework.context.support;resolution:=optional,
+ org.springframework.core;resolution:=optional,
+ org.springframework.core.annotation;resolution:=optional,
+ org.springframework.core.env;resolution:=optional,
+ org.springframework.core.io;resolution:=optional,
+ org.springframework.core.serializer;resolution:=optional,
+ org.springframework.core.task;resolution:=optional,
+ org.springframework.core.type;resolution:=optional,
+ org.springframework.dao;resolution:=optional,
+ org.springframework.jdbc.core;resolution:=optional,
+ org.springframework.jdbc.core.simple;resolution:=optional,
+ org.springframework.jdbc.datasource;resolution:=optional,
+ org.springframework.jdbc.support.incrementer;resolution:=optional,
+ org.springframework.jdbc.support.lob;resolution:=optional,
+ org.springframework.retry;resolution:=optional,
+ org.springframework.retry.backoff;resolution:=optional,
+ org.springframework.retry.context;resolution:=optional,
+ org.springframework.retry.listener;resolution:=optional,
+ org.springframework.retry.policy;resolution:=optional,
+ org.springframework.retry.support;resolution:=optional,
+ org.springframework.scheduling.concurrent;resolution:=optional,
+ org.springframework.stereotype;resolution:=optional,
+ org.springframework.transaction;resolution:=optional,
+ org.springframework.transaction.annotation;resolution:=optional,
+ org.springframework.transaction.interceptor;resolution:=optional,
+ org.springframework.transaction.support;resolution:=optional,
+ org.springframework.util;resolution:=optional,
+ org.springframework.util.xml;resolution:=optional,
+ org.w3c.dom;resolution:=optional,
+ org.w3c.dom.ls;resolution:=optional,
+ org.w3c.dom.traversal;resolution:=optional
+ </servicemix.osgi.import.pkg>
+ </properties>
+
+ <dependencies>
+ <dependency>
+ <groupId>${pkgGroupId}</groupId>
+ <artifactId>${pkgArtifactId}</artifactId>
+ <version>${pkgVersion}</version>
+ </dependency>
+
+ <!-- sources -->
+ <dependency>
+ <groupId>${pkgGroupId}</groupId>
+ <artifactId>${pkgArtifactId}</artifactId>
+ <version>${pkgVersion}</version>
+ <classifier>sources</classifier>
+ </dependency>
+ </dependencies>
+
+ <build>
+ <plugins>
+ <plugin>
+ <groupId>org.apache.maven.plugins</groupId>
+ <artifactId>maven-shade-plugin</artifactId>
+ <executions>
+ <execution>
+ <phase>package</phase>
+ <goals>
+ <goal>shade</goal>
+ </goals>
+ <configuration>
+ <artifactSet>
+ <includes>
+ <include>${pkgGroupId}:${pkgArtifactId}</include>
+ </includes>
+ </artifactSet>
+ <filters>
+ <filter>
+ <artifact>${pkgGroupId}:${pkgArtifactId}</artifact>
+ <includes>
+ <include>**/*.properties</include>
+ <include>**/*.xsd</include>
+ <include>**/*.xml</include>
+ <include>**/*.sql</include>
+ <include>META-INF/**/*</include>
+ </includes>
+ </filter>
+ </filters>
+ <promoteTransitiveDependencies>true</promoteTransitiveDependencies>
+ <createDependencyReducedPom>true</createDependencyReducedPom>
+ </configuration>
+ </execution>
+ </executions>
+ </plugin>
+ </plugins>
+ </build>
+</project>
diff --git a/spring-batch-core-3.0.10.RELEASE/src/main/resources/OSGI-INF/bundle.info b/spring-batch-core-3.0.10.RELEASE/src/main/resources/OSGI-INF/bundle.info
new file mode 100644
index 0000000..458af9b
--- /dev/null
+++ b/spring-batch-core-3.0.10.RELEASE/src/main/resources/OSGI-INF/bundle.info
@@ -0,0 +1,13 @@
+\u001B[1mSYNOPSIS\u001B[0m
+ ${project.description}
+
+ Original Maven URL:
+ \u001B[33mmvn:${pkgGroupId}/${pkgArtifactId}/${pkgVersion}\u001B[0m
+
+\u001B[1mDESCRIPTION\u001B[0m
+ A lightweight, comprehensive batch framework designed to enable the
+ development of robust batch applications vital for the daily operations
+ of enterprise systems.
+
+\u001B[1mSEE ALSO\u001B[0m
+ \u001B[36mhttp://projects.spring.io/spring-batch/\u001B[0m