svn commit: r1718127 - in /ofbiz/trunk/specialpurpose: LICENSE solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

svn commit: r1718127 - in /ofbiz/trunk/specialpurpose: LICENSE solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar

jleroux@apache.org
Author: jleroux
Date: Sat Dec  5 22:04:39 2015
New Revision: 1718127

URL: http://svn.apache.org/viewvc?rev=1718127&view=rev
Log:
Removes useless and vulnerable hadoop-hdfs-2.3.0.jar - OFBIZ-6756

The hadoop-hdfs-2.3.0.jar lib has been introduced with the solr component but the hadoop-hdfs-2.6.0.jar is also there and if hadoop-hdfs-2.3.0.jar is removed OFBiz compiles w/o issues. Without hadoop-hdfs-2.3.0.jar the tests pass.

Note: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3627

I also changed wrong entries in specialpurpose/LICENCE from 2.2.0 to 2.6.0

Removed:
    ofbiz/trunk/specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar
Modified:
    ofbiz/trunk/specialpurpose/LICENSE

Modified: ofbiz/trunk/specialpurpose/LICENSE
URL: http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/LICENSE?rev=1718127&r1=1718126&r2=1718127&view=diff
==============================================================================
--- ofbiz/trunk/specialpurpose/LICENSE (original)
+++ ofbiz/trunk/specialpurpose/LICENSE Sat Dec  5 22:04:39 2015
@@ -37,10 +37,10 @@ specialpurpose/solr/lib/runtime/zookeepe
 specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-cli-1.2.jar
 specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-configuration-1.6.jar
 specialpurpose/solr/webapp/solr/WEB-INF/lib/concurrentlinkedhashmap-lru-1.2.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.6.0.jar
 specialpurpose/solr/webapp/solr/WEB-INF/lib/hppc-0.5.2.jar
 specialpurpose/solr/webapp/solr/WEB-INF/lib/httpmime-4.3.1.jar
 specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-analyzers-kuromoji-4.9.0.jar