Author: jleroux
Date: Sat Dec 5 22:04:39 2015
New Revision: 1718127
URL:
http://svn.apache.org/viewvc?rev=1718127&view=revLog:
Removes useless and vulnerable hadoop-hdfs-2.3.0.jar - OFBIZ-6756
The hadoop-hdfs-2.3.0.jar lib has been introduced with the solr component but the hadoop-hdfs-2.6.0.jar is also there and if hadoop-hdfs-2.3.0.jar is removed OFBiz compiles w/o issues. Without hadoop-hdfs-2.3.0.jar the tests pass.
Note:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3627I also changed wrong entries in specialpurpose/LICENCE from 2.2.0 to 2.6.0
Removed:
ofbiz/trunk/specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar
Modified:
ofbiz/trunk/specialpurpose/LICENSE
Modified: ofbiz/trunk/specialpurpose/LICENSE
URL:
http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/LICENSE?rev=1718127&r1=1718126&r2=1718127&view=diff==============================================================================
--- ofbiz/trunk/specialpurpose/LICENSE (original)
+++ ofbiz/trunk/specialpurpose/LICENSE Sat Dec 5 22:04:39 2015
@@ -37,10 +37,10 @@ specialpurpose/solr/lib/runtime/zookeepe
specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-cli-1.2.jar
specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-configuration-1.6.jar
specialpurpose/solr/webapp/solr/WEB-INF/lib/concurrentlinkedhashmap-lru-1.2.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.2.0.jar
-specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.6.0.jar
+specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.6.0.jar
specialpurpose/solr/webapp/solr/WEB-INF/lib/hppc-0.5.2.jar
specialpurpose/solr/webapp/solr/WEB-INF/lib/httpmime-4.3.1.jar
specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-analyzers-kuromoji-4.9.0.jar