You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@struts.apache.org by Apache Jenkins Server <je...@builds.apache.org> on 2018/12/30 22:30:35 UTC

Build failed in Jenkins: Struts-master-JDK7-dependency-check #130

See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/130/display/redirect?page=changes>

Changes:

[lukaszlenart] WW-4938 Adds missing test case and properly fix injecting internal beans

[lukaszlenart] WW-4975 Upgrades commons-fileupload to version 1.4

------------------------------------------
[...truncated 480.38 KB...]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
2018-12-30 22:30:23,871 WARN  [main] interceptor.ExceptionMappingInterceptor (ExceptionMappingInterceptor.java:254) - test
java.lang.Exception: test
	at com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest.testThrownExceptionNoMatchLoggingCategoryLevelWarn(ExceptionMappingInterceptorTest.java:179) [test-classes/:?]
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.7.0_80]
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[?:1.7.0_80]
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.7.0_80]
	at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
	at junit.framework.TestCase.runTest(TestCase.java:176) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.runBare(TestCase.java:141) [junit-4.12.jar:4.12]
	at junit.framework.TestResult$1.protect(TestResult.java:122) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.runProtected(TestResult.java:142) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.run(TestResult.java:125) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.run(TestCase.java:129) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.runTest(TestSuite.java:252) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.run(TestSuite.java:247) [junit-4.12.jar:4.12]
	at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:86) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:128) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:27) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.062 s - in com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.01 s - in com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.134 s - in com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Running com.opensymphony.xwork2.DefaultActionInvocationTest
2018-12-30 22:30:24,112 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2018-12-30 22:30:24,113 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
2018-12-30 22:30:24,162 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action ExceptionFoo
2018-12-30 22:30:24,163 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action ExceptionFoo
2018-12-30 22:30:24,187 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2018-12-30 22:30:24,358 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action NullFoo
2018-12-30 22:30:24,359 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action NullFoo
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.315 s - in com.opensymphony.xwork2.DefaultActionInvocationTest
[INFO] Running com.opensymphony.xwork2.ChainResultTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.069 s - in com.opensymphony.xwork2.ChainResultTest
[INFO] Running com.opensymphony.xwork2.ActionContextTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in com.opensymphony.xwork2.ActionContextTest
[INFO] Running com.opensymphony.xwork2.test.annotations.PersonActionTest
Address: com.opensymphony.xwork2.test.annotations.Address@6e3584cd
Person: com.opensymphony.xwork2.test.annotations.Person@34ff74a5
Address: com.opensymphony.xwork2.test.annotations.Address@793358ac
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.013 s - in com.opensymphony.xwork2.test.annotations.PersonActionTest
[INFO] Running com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.032 s - in com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Running com.opensymphony.xwork2.ActionSupportTest
2018-12-30 22:30:24,570 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,571 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,571 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,571 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,571 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,572 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,572 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,572 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2018-12-30 22:30:24,572 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
[INFO] Tests run: 16, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.087 s - in com.opensymphony.xwork2.ActionSupportTest
[INFO] Running com.opensymphony.xwork2.ProxyInvocationTest
2018-12-30 22:30:24,622 WARN  [main] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - The use of the default (unnamed) package is discouraged!
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.009 s - in com.opensymphony.xwork2.ProxyInvocationTest
[INFO] Running com.opensymphony.xwork2.DefaultClasstTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.023 s - in com.opensymphony.xwork2.DefaultClasstTest
[INFO] Running com.opensymphony.xwork2.ActionInvocationTest
2018-12-30 22:30:24,679 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/myCommand
2018-12-30 22:30:24,679 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/myCommand
2018-12-30 22:30:24,736 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/resultAction
2018-12-30 22:30:24,736 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/resultAction
2018-12-30 22:30:24,804 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2018-12-30 22:30:24,810 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.158 s - in com.opensymphony.xwork2.ActionInvocationTest
[INFO] Running com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.031 s - in com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.006 s - in com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.LocaleAwareTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.034 s - in com.opensymphony.xwork2.LocaleAwareTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 1844, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1589 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 1582 licenses.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-core ---
[INFO] 
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check-maven:3.3.4:check (default) @ struts2-core ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (14 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (4 seconds)
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

bsh-2.0b4.jar (org.beanshell:bsh:2.0b4, cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510
slf4j-api-1.7.25.jar (cpe:/a:slf4j:slf4j:1.7.25, org.slf4j:slf4j-api:1.7.25) : CVE-2018-8088


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO] 
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.679 s]
[INFO] Struts 2 ........................................... SUCCESS [ 24.465 s]
[INFO] Struts 2 Core ...................................... FAILURE [01:56 min]
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  02:25 min
[INFO] Finished at: 2018-12-30T22:30:34Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.3.4:check (default) on project struts2-core: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': 
[ERROR] 
[ERROR] slf4j-api-1.7.25.jar: CVE-2018-8088
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Re: Jenkins build is back to normal : Struts-master-JDK7-dependency-check #133

Posted by Yasser Zamani <ya...@apache.org>.

On 1/11/2019 10:24 AM, Lukasz Lenart wrote:
> czw., 10 sty 2019 o 23:39 Apache Jenkins Server
> <je...@builds.apache.org> napisał(a):
>>
>> See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/133/display/redirect?page=changes>
> 
> This is a great news!!!

Yes :) we're grateful to James for this [1]!.

[1] https://github.com/apache/struts/pull/307

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Re: Jenkins build is back to normal : Struts-master-JDK7-dependency-check #133

Posted by Lukasz Lenart <lu...@apache.org>.
czw., 10 sty 2019 o 23:39 Apache Jenkins Server
<je...@builds.apache.org> napisał(a):
>
> See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/133/display/redirect?page=changes>

This is a great news!!!


Regards
-- 
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Jenkins build is back to normal : Struts-master-JDK7-dependency-check #133

Posted by Apache Jenkins Server <je...@builds.apache.org>.
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/133/display/redirect?page=changes>


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Build failed in Jenkins: Struts-master-JDK7-dependency-check #132

Posted by Apache Jenkins Server <je...@builds.apache.org>.
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/132/display/redirect?page=changes>

Changes:

[lukaszlenart] WW-4972 Switches incompatible_improvements to VERSION_2_3_28

[lukaszlenart] WW-4972 Uses built-in auto escaping instead of escaping each parameter

[lukaszlenart] WW-4972 Uses proper statement to escape JS related events

[lukaszlenart] WW-4972 Adds two simple test cases to cover incompatible improvements

[lukaszlenart] WW-4996 Refactors creator to use ObjectFactory#buildConverter method

[lukaszlenart] WW-4996 Renames and moves class to proper package to better expose its

[lukaszlenart] WW-4996 Reduces code duplication

[lukaszlenart] WW-4996 Uses Struts* naming pattern instead of Default*

[lukaszlenart] WW-4996 Fixes post rebase file name changes

[lukaszlenart] WW-4972 Adds another test case to cover escaping

------------------------------------------
[...truncated 479.15 KB...]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
2019-01-06 22:30:16,608 WARN  [main] interceptor.ExceptionMappingInterceptor (ExceptionMappingInterceptor.java:254) - test
java.lang.Exception: test
	at com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest.testThrownExceptionNoMatchLoggingCategoryLevelWarn(ExceptionMappingInterceptorTest.java:179) [test-classes/:?]
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.7.0_80]
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[?:1.7.0_80]
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.7.0_80]
	at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
	at junit.framework.TestCase.runTest(TestCase.java:176) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.runBare(TestCase.java:141) [junit-4.12.jar:4.12]
	at junit.framework.TestResult$1.protect(TestResult.java:122) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.runProtected(TestResult.java:142) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.run(TestResult.java:125) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.run(TestCase.java:129) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.runTest(TestSuite.java:252) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.run(TestSuite.java:247) [junit-4.12.jar:4.12]
	at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:86) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:128) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:27) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.076 s - in com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.012 s - in com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.177 s - in com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Running com.opensymphony.xwork2.DefaultActionInvocationTest
2019-01-06 22:30:16,928 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-06 22:30:16,929 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
2019-01-06 22:30:16,992 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action ExceptionFoo
2019-01-06 22:30:16,992 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action ExceptionFoo
2019-01-06 22:30:17,023 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-06 22:30:17,241 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action NullFoo
2019-01-06 22:30:17,242 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action NullFoo
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.409 s - in com.opensymphony.xwork2.DefaultActionInvocationTest
[INFO] Running com.opensymphony.xwork2.ChainResultTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.089 s - in com.opensymphony.xwork2.ChainResultTest
[INFO] Running com.opensymphony.xwork2.ActionContextTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.038 s - in com.opensymphony.xwork2.ActionContextTest
[INFO] Running com.opensymphony.xwork2.test.annotations.PersonActionTest
Address: com.opensymphony.xwork2.test.annotations.Address@1a4996a6
Person: com.opensymphony.xwork2.test.annotations.Person@14052902
Address: com.opensymphony.xwork2.test.annotations.Address@6f64ade3
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.016 s - in com.opensymphony.xwork2.test.annotations.PersonActionTest
[INFO] Running com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.039 s - in com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Running com.opensymphony.xwork2.ActionSupportTest
2019-01-06 22:30:17,509 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,510 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,511 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,511 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,511 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,512 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,512 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,512 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-06 22:30:17,512 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
[INFO] Tests run: 16, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.116 s - in com.opensymphony.xwork2.ActionSupportTest
[INFO] Running com.opensymphony.xwork2.ProxyInvocationTest
2019-01-06 22:30:17,580 WARN  [main] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - The use of the default (unnamed) package is discouraged!
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.012 s - in com.opensymphony.xwork2.ProxyInvocationTest
[INFO] Running com.opensymphony.xwork2.DefaultClasstTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.028 s - in com.opensymphony.xwork2.DefaultClasstTest
[INFO] Running com.opensymphony.xwork2.ActionInvocationTest
2019-01-06 22:30:17,649 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/myCommand
2019-01-06 22:30:17,650 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/myCommand
2019-01-06 22:30:17,720 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/resultAction
2019-01-06 22:30:17,720 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/resultAction
2019-01-06 22:30:17,788 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-06 22:30:17,795 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.178 s - in com.opensymphony.xwork2.ActionInvocationTest
[INFO] Running com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.04 s - in com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.007 s - in com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.LocaleAwareTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.061 s - in com.opensymphony.xwork2.LocaleAwareTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 1849, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1590 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 1583 licenses.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-core ---
[INFO] 
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check-maven:3.3.4:check (default) @ struts2-core ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (14 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (3 seconds)
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

bsh-2.0b4.jar (org.beanshell:bsh:2.0b4, cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510
slf4j-api-1.7.25.jar (cpe:/a:slf4j:slf4j:1.7.25, org.slf4j:slf4j-api:1.7.25) : CVE-2018-8088


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO] 
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.677 s]
[INFO] Struts 2 ........................................... SUCCESS [ 17.223 s]
[INFO] Struts 2 Core ...................................... FAILURE [01:57 min]
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  02:18 min
[INFO] Finished at: 2019-01-06T22:30:26Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.3.4:check (default) on project struts2-core: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': 
[ERROR] 
[ERROR] slf4j-api-1.7.25.jar: CVE-2018-8088
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org


Build failed in Jenkins: Struts-master-JDK7-dependency-check #131

Posted by Apache Jenkins Server <je...@builds.apache.org>.
See <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/131/display/redirect?page=changes>

Changes:

[Sebastian.Peters] Make MILLISECOND_FORMAT static final

[Sebastian.Peters] Remove the thrown NumberFormatException which is a runtime exception

[Sebastian.Peters] Remove commented-out lines of code

[Sebastian.Peters] Fix warning: Use "BigDecimal.valueOf" instead

[Sebastian.Peters] Add the "@Override" annotation

[Sebastian.Peters] Simplify nested else/if

[Sebastian.Peters] Add test for convertValue with BigDecimal

[Sebastian.Peters] Use parameterized Class<?> instead of raw type

[Sebastian.Peters] Add test for convertValue with BigInteger

[Sebastian.Peters] Fix behaviour for convertValue with value null

[github] introduce integration tests with minimum needed changes (#301)

[yasserzamani] downgrade htmlunit to 2.24 to keep java 7 compatibility

------------------------------------------
[...truncated 481.71 KB...]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
2019-01-03 22:34:49,059 WARN  [main] interceptor.ExceptionMappingInterceptor (ExceptionMappingInterceptor.java:254) - test
java.lang.Exception: test
	at com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest.testThrownExceptionNoMatchLoggingCategoryLevelWarn(ExceptionMappingInterceptorTest.java:179) [test-classes/:?]
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.7.0_80]
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) ~[?:1.7.0_80]
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:1.7.0_80]
	at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
	at junit.framework.TestCase.runTest(TestCase.java:176) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.runBare(TestCase.java:141) [junit-4.12.jar:4.12]
	at junit.framework.TestResult$1.protect(TestResult.java:122) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.runProtected(TestResult.java:142) [junit-4.12.jar:4.12]
	at junit.framework.TestResult.run(TestResult.java:125) [junit-4.12.jar:4.12]
	at junit.framework.TestCase.run(TestCase.java:129) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.runTest(TestSuite.java:252) [junit-4.12.jar:4.12]
	at junit.framework.TestSuite.run(TestSuite.java:247) [junit-4.12.jar:4.12]
	at org.junit.internal.runners.JUnit38ClassRunner.run(JUnit38ClassRunner.java:86) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:128) [junit-4.12.jar:4.12]
	at org.junit.runners.Suite.runChild(Suite.java:27) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$3.run(ParentRunner.java:290) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:71) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:288) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.access$000(ParentRunner.java:58) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:268) [junit-4.12.jar:4.12]
	at org.junit.runners.ParentRunner.run(ParentRunner.java:363) [junit-4.12.jar:4.12]
	at org.apache.maven.surefire.junitcore.JUnitCore.run(JUnitCore.java:55) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.createRequestAndRun(JUnitCoreWrapper.java:137) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.executeEager(JUnitCoreWrapper.java:107) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:83) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreWrapper.execute(JUnitCoreWrapper.java:75) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.junitcore.JUnitCoreProvider.invoke(JUnitCoreProvider.java:158) [surefire-junit47-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.invokeProviderInSameClassLoader(ForkedBooter.java:384) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.runSuitesInProcess(ForkedBooter.java:345) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.execute(ForkedBooter.java:126) [surefire-booter-2.22.1.jar:2.22.1]
	at org.apache.maven.surefire.booter.ForkedBooter.main(ForkedBooter.java:418) [surefire-booter-2.22.1.jar:2.22.1]
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.076 s - in com.opensymphony.xwork2.interceptor.ExceptionMappingInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.014 s - in com.opensymphony.xwork2.interceptor.ModelDrivenInterceptorTest
[INFO] Running com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Tests run: 12, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.174 s - in com.opensymphony.xwork2.interceptor.DefaultWorkflowInterceptorTest
[INFO] Running com.opensymphony.xwork2.DefaultActionInvocationTest
2019-01-03 22:34:49,372 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-03 22:34:49,373 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
2019-01-03 22:34:49,437 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action ExceptionFoo
2019-01-03 22:34:49,437 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action ExceptionFoo
2019-01-03 22:34:49,469 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-03 22:34:49,695 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action NullFoo
2019-01-03 22:34:49,696 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action NullFoo
[INFO] Tests run: 13, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.414 s - in com.opensymphony.xwork2.DefaultActionInvocationTest
[INFO] Running com.opensymphony.xwork2.ChainResultTest
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.093 s - in com.opensymphony.xwork2.ChainResultTest
[INFO] Running com.opensymphony.xwork2.ActionContextTest
[INFO] Tests run: 8, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.04 s - in com.opensymphony.xwork2.ActionContextTest
[INFO] Running com.opensymphony.xwork2.test.annotations.PersonActionTest
Address: com.opensymphony.xwork2.test.annotations.Address@793358ac
Person: com.opensymphony.xwork2.test.annotations.Person@741656c7
Address: com.opensymphony.xwork2.test.annotations.Address@260c6531
[INFO] Tests run: 3, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.016 s - in com.opensymphony.xwork2.test.annotations.PersonActionTest
[INFO] Running com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.041 s - in com.opensymphony.xwork2.ObjectFactoryTest
[INFO] Running com.opensymphony.xwork2.ActionSupportTest
2019-01-03 22:34:49,965 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,966 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,966 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,967 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,967 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,967 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,968 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,968 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
2019-01-03 22:34:49,968 WARN  [main] util.StrutsLocalizedTextProvider (StrutsLocalizedTextProvider.java:226) - Trying to find text with null key!
[INFO] Tests run: 16, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.107 s - in com.opensymphony.xwork2.ActionSupportTest
[INFO] Running com.opensymphony.xwork2.ProxyInvocationTest
2019-01-03 22:34:50,028 WARN  [main] ognl.SecurityMemberAccess (SecurityMemberAccess.java:163) - The use of the default (unnamed) package is discouraged!
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.011 s - in com.opensymphony.xwork2.ProxyInvocationTest
[INFO] Running com.opensymphony.xwork2.DefaultClasstTest
[INFO] Tests run: 1, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.025 s - in com.opensymphony.xwork2.DefaultClasstTest
[INFO] Running com.opensymphony.xwork2.ActionInvocationTest
2019-01-03 22:34:50,095 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/myCommand
2019-01-03 22:34:50,095 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/myCommand
2019-01-03 22:34:50,164 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action baz/resultAction
2019-01-03 22:34:50,165 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action baz/resultAction
2019-01-03 22:34:50,259 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Starting execution stack for action Foo
2019-01-03 22:34:50,267 INFO  [main] interceptor.LoggingInterceptor (LoggingInterceptor.java:86) - Finishing execution stack for action Foo
[INFO] Tests run: 5, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.202 s - in com.opensymphony.xwork2.ActionInvocationTest
[INFO] Running com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Tests run: 4, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.049 s - in com.opensymphony.xwork2.security.DefaultExcludedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.008 s - in com.opensymphony.xwork2.security.DefaultAcceptedPatternsCheckerTest
[INFO] Running com.opensymphony.xwork2.LocaleAwareTest
[INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.042 s - in com.opensymphony.xwork2.LocaleAwareTest
[INFO] 
[INFO] Results:
[INFO] 
[INFO] Tests run: 1846, Failures: 0, Errors: 0, Skipped: 0
[INFO] 
[INFO] 
[INFO] --- apache-rat-plugin:0.12:check (default) @ struts2-core ---
[INFO] Added 1 additional default licenses.
[INFO] Added 1 custom approved licenses.
[INFO] Will parse SCM ignores for exclusions...
[INFO] Finished adding exclusions from SCM ignore files.
[INFO] 61 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1589 resources included (use -debug for more details)
[INFO] Rat check: Summary over all files. Unapproved: 0, unknown: 0, generated: 0, approved: 1582 licenses.
[INFO] 
[INFO] --- maven-jar-plugin:3.1.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT.jar>
[INFO] 
[INFO] >>> maven-source-plugin:3.0.1:jar (attach-sources) > generate-sources @ struts2-core >>>
[INFO] 
[INFO] --- maven-enforcer-plugin:1.4.1:enforce (enforce-maven-version) @ struts2-core ---
[INFO] 
[INFO] <<< maven-source-plugin:3.0.1:jar (attach-sources) < generate-sources @ struts2-core <<<
[INFO] 
[INFO] 
[INFO] --- maven-source-plugin:3.0.1:jar (attach-sources) @ struts2-core ---
[INFO] Building jar: <https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.6-SNAPSHOT-sources.jar>
[INFO] 
[INFO] --- maven-site-plugin:3.7.1:attach-descriptor (attach-descriptor) @ struts2-core ---
[INFO] Skipping because packaging 'jar' is not pom.
[INFO] 
[INFO] --- dependency-check-maven:3.3.4:check (default) @ struts2-core ---
[INFO] Central analyzer disabled
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Skipping RetireJS update since last update was within 24 hours.
[INFO] Check for updates complete (12 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (1 seconds)
[INFO] Skipping CPE Analysis for npm
[INFO] Finished CPE Analyzer (2 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (3 seconds)
[WARNING] 

One or more dependencies were identified with known vulnerabilities in Struts 2 Core:

bsh-2.0b4.jar (org.beanshell:bsh:2.0b4, cpe:/a:beanshell_project:beanshell:2.0.b4) : CVE-2016-2510
slf4j-api-1.7.25.jar (cpe:/a:slf4j:slf4j:1.7.25, org.slf4j:slf4j-api:1.7.25) : CVE-2018-8088


See the dependency-check report for more details.


[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary for Struts 2 2.6-SNAPSHOT:
[INFO] 
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [  1.784 s]
[INFO] Struts 2 ........................................... SUCCESS [04:47 min]
[INFO] Struts 2 Core ...................................... FAILURE [01:58 min]
[INFO] Struts 2 Plugins ................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Async Plugin .............................. SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] DEPRECATED: Struts 2 Embedded JSP Plugin ........... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts 2 OSGi Bundles .............................. SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  06:50 min
[INFO] Finished at: 2019-01-03T22:34:59Z
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.3.4:check (default) on project struts2-core: 
[ERROR] 
[ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': 
[ERROR] 
[ERROR] slf4j-api-1.7.25.jar: CVE-2018-8088
[ERROR] 
[ERROR] See the dependency-check report for more details.
[ERROR] 
[ERROR] 
[ERROR] -> [Help 1]
[ERROR] 
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR] 
[ERROR] For more information about the errors and possible solutions, please read the following articles:
[ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR] 
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR]   mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org
For additional commands, e-mail: dev-help@struts.apache.org