You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by ad...@apache.org on 2017/11/13 09:12:14 UTC

[1/6] james-project git commit: JAMES-2209 Upgrade Jetty to 9.4.7.v20170914

Repository: james-project
Updated Branches:
  refs/heads/master 1209385ca -> 9047b4bab


JAMES-2209 Upgrade Jetty to 9.4.7.v20170914

Jetty 9.4.4.v20170414 is vulnerable to CVE-2017-9735.


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/7efdc530
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/7efdc530
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/7efdc530

Branch: refs/heads/master
Commit: 7efdc530b17d8f64eb0461183b64fdfb1d2b2fee
Parents: 434126b
Author: Thibaut SAUTEREAU <ts...@linagora.com>
Authored: Wed Nov 8 16:51:52 2017 +0700
Committer: benwa <bt...@linagora.com>
Committed: Thu Nov 9 15:43:44 2017 +0700

----------------------------------------------------------------------
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/7efdc530/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 668a55e..6fbd7de 100644
--- a/pom.xml
+++ b/pom.xml
@@ -634,7 +634,7 @@
         <karaf.tooling.exam.container.version>2.3.0</karaf.tooling.exam.container.version>
         <pax-logging-api.version>1.6.4</pax-logging-api.version>
         <jackson-data.version>2.6.3</jackson-data.version>
-        <jetty.version>9.4.4.v20170414</jetty.version>
+        <jetty.version>9.4.7.v20170914</jetty.version>
         <cassandra-unit.version>2.1.9.2</cassandra-unit.version>
         <assertj-guava.version>3.1.0</assertj-guava.version>
         <testcontainers-version>1.4.2</testcontainers-version>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[3/6] james-project git commit: JAMES-2209 Upgrade Logback to 1.1.11

Posted by ad...@apache.org.
JAMES-2209 Upgrade Logback to 1.1.11

logback-classic is vulnerable to CVE-2017-5929.


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/434126b3
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/434126b3
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/434126b3

Branch: refs/heads/master
Commit: 434126b3253416e1c0ab3365950bf3908cfba8b4
Parents: 36ee040
Author: Thibaut SAUTEREAU <ts...@linagora.com>
Authored: Wed Nov 8 16:48:24 2017 +0700
Committer: benwa <bt...@linagora.com>
Committed: Thu Nov 9 15:43:44 2017 +0700

----------------------------------------------------------------------
 mpt/pom.xml | 2 --
 pom.xml     | 4 ++--
 2 files changed, 2 insertions(+), 4 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/434126b3/mpt/pom.xml
----------------------------------------------------------------------
diff --git a/mpt/pom.xml b/mpt/pom.xml
index 7392481..89cd85f 100644
--- a/mpt/pom.xml
+++ b/mpt/pom.xml
@@ -65,8 +65,6 @@
         <log4j.version>1.2.16</log4j.version>
         <lucene-core.version>3.6.0</lucene-core.version>
         <slf4j.version>1.7.25</slf4j.version>
-
-        <logback.version>1.1.7</logback.version>
     </properties>
 
     <build>

http://git-wip-us.apache.org/repos/asf/james-project/blob/434126b3/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 4cb639c..668a55e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -672,7 +672,7 @@
         <guice.version>4.0</guice.version>
         <jackrabbit-core.version>2.5.2</jackrabbit-core.version>
 
-        <logback.version>1.1.7</logback.version>
+        <logback.version>1.1.11</logback.version>
     </properties>
 
     <dependencyManagement>
@@ -1396,7 +1396,7 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.1.7</version>
+                <version>${logback.version}</version>
             </dependency>
             <dependency>
                 <groupId>com.beetstra.jutf7</groupId>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[5/6] james-project git commit: JAMES-2212 Jar names have changed, upgrade packaging to new names

Posted by ad...@apache.org.
JAMES-2212 Jar names have changed, upgrade packaging to new names


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/fb166b48
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/fb166b48
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/fb166b48

Branch: refs/heads/master
Commit: fb166b485b2b6b551e29ee210d1dfde4bca79e8c
Parents: 662b9b2
Author: Raphael Ouazana <ra...@linagora.com>
Authored: Fri Nov 10 17:13:00 2017 +0100
Committer: Raphael Ouazana <ra...@linagora.com>
Committed: Fri Nov 10 17:14:38 2017 +0100

----------------------------------------------------------------------
 dockerfiles/packaging/debian/package.sh | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/fb166b48/dockerfiles/packaging/debian/package.sh
----------------------------------------------------------------------
diff --git a/dockerfiles/packaging/debian/package.sh b/dockerfiles/packaging/debian/package.sh
index 425d9b8..d6c2278 100755
--- a/dockerfiles/packaging/debian/package.sh
+++ b/dockerfiles/packaging/debian/package.sh
@@ -14,9 +14,10 @@ fi
 
 RELEASE=$1
 ITERATION=$2
-cp /jars/james-server.jar /debian/package/usr/share/james/
+cp /jars/james-server-cassandra-guice.jar /debian/package/usr/share/james/james-server.jar
 cp -r /jars/james-server-cassandra-guice.lib /debian/package/usr/share/james/
-cp /jars/james-cli.jar /debian/package/usr/share/james/
+cp /jars/james-server-cli.jar /debian/package/usr/share/james/james-cli.jar
+cp -r /jars/james-server-cli.lib /debian/package/usr/share/james/
 
 fpm -s dir -t deb \
  -n james \


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[2/6] james-project git commit: JAMES-2209 Upgrade ActiveMQ to 5.15.2

Posted by ad...@apache.org.
JAMES-2209 Upgrade ActiveMQ to 5.15.2

ActiveMQ 5.15.0 is vulberable to CVE-2015-5183 and CVE-2015-5184.


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/36ee0401
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/36ee0401
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/36ee0401

Branch: refs/heads/master
Commit: 36ee04014f0136a3dafcbba23bc5b42fa09a81e0
Parents: 1209385
Author: Thibaut SAUTEREAU <ts...@linagora.com>
Authored: Wed Nov 8 16:47:04 2017 +0700
Committer: benwa <bt...@linagora.com>
Committed: Thu Nov 9 15:43:44 2017 +0700

----------------------------------------------------------------------
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/36ee0401/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index 5e8f82f..4cb639c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -578,7 +578,7 @@
         -->
         <deployTechnicalSiteDirectory />
 
-        <activemq.version>5.15.0</activemq.version>
+        <activemq.version>5.15.2</activemq.version>
         <apache-mime4j.version>0.8.1</apache-mime4j.version>
         <camel.version>2.19.1</camel.version>
         <derby.version>10.9.1.0</derby.version>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[4/6] james-project git commit: JAMES-2212 Old Maven release is not available on mirror, get it from archives

Posted by ad...@apache.org.
JAMES-2212 Old Maven release is not available on mirror, get it from archives


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/662b9b2c
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/662b9b2c
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/662b9b2c

Branch: refs/heads/master
Commit: 662b9b2c3510d307a1cd27a93aa2eb6c2f30c2a6
Parents: 1209385
Author: Raphael Ouazana <ra...@linagora.com>
Authored: Thu Nov 9 15:23:09 2017 +0100
Committer: Raphael Ouazana <ra...@linagora.com>
Committed: Fri Nov 10 17:13:18 2017 +0100

----------------------------------------------------------------------
 dockerfiles/compilation/java-8/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/662b9b2c/dockerfiles/compilation/java-8/Dockerfile
----------------------------------------------------------------------
diff --git a/dockerfiles/compilation/java-8/Dockerfile b/dockerfiles/compilation/java-8/Dockerfile
index d4ed03c..4ff6660 100644
--- a/dockerfiles/compilation/java-8/Dockerfile
+++ b/dockerfiles/compilation/java-8/Dockerfile
@@ -8,7 +8,7 @@ ENV GIT_VERSION 1:2.1.4-2.1
 
 # Install Maven
 WORKDIR /root
-RUN wget http://mirrors.ircam.fr/pub/apache/maven/maven-3/3.5.0/binaries/apache-maven-3.5.0-bin.tar.gz
+RUN wget https://archive.apache.org/dist/maven/maven-3/3.5.0/binaries/apache-maven-3.5.0-bin.tar.gz
 RUN tar -xvf apache-maven-3.5.0-bin.tar.gz
 RUN ln -s /root/apache-maven-3.5.0/bin/mvn /usr/bin/mvn
 


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[6/6] james-project git commit: Merge remote-tracking branch 'rouazana/JAMES-2212'

Posted by ad...@apache.org.
Merge remote-tracking branch 'rouazana/JAMES-2212'


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/9047b4ba
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/9047b4ba
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/9047b4ba

Branch: refs/heads/master
Commit: 9047b4babd8ba2d17c3e53d6b5b63f5eb5a631d8
Parents: 7efdc53 fb166b4
Author: Antoine Duprat <ad...@linagora.com>
Authored: Mon Nov 13 10:11:39 2017 +0100
Committer: Antoine Duprat <ad...@linagora.com>
Committed: Mon Nov 13 10:11:39 2017 +0100

----------------------------------------------------------------------
 dockerfiles/compilation/java-8/Dockerfile | 2 +-
 dockerfiles/packaging/debian/package.sh   | 5 +++--
 2 files changed, 4 insertions(+), 3 deletions(-)
----------------------------------------------------------------------



---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org