commit:     fe6324607afad6e952b57747c3297a6b5d69ffbd
Author:     Volkmar W. Pogatzki <gentoo <AT> pogatzki <DOT> net>
AuthorDate: Sun Mar 28 21:13:13 2021 +0000
Commit:     Miroslav Šulc <fordfrog <AT> gentoo <DOT> org>
CommitDate: Tue Apr  6 10:44:28 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fe632460

dev-java/snakeyaml: bump to 1.28 (CVE-2017-18640)

Closes: https://bugs.gentoo.org/776796
Package-Manager: Portage-3.0.17, Repoman-3.0.2
Signed-off-by: Volkmar W. Pogatzki <gentoo <AT> pogatzki.net>
Closes: https://github.com/gentoo/gentoo/pull/20176
Signed-off-by: Miroslav Šulc <fordfrog <AT> gentoo.org>

 dev-java/snakeyaml/Manifest              |  1 +
 dev-java/snakeyaml/snakeyaml-1.28.ebuild | 86 ++++++++++++++++++++++++++++++++
 2 files changed, 87 insertions(+)

diff --git a/dev-java/snakeyaml/Manifest b/dev-java/snakeyaml/Manifest
index bf4e3ba8cc2..585b73ed368 100644
--- a/dev-java/snakeyaml/Manifest
+++ b/dev-java/snakeyaml/Manifest
@@ -1 +1,2 @@
+DIST asomov-snakeyaml-b28f0b4d87c6.tar.gz 397832 BLAKE2B 
054c228cd739e0d7ae89227cba7ae1aba76e5b6a7aae4915a765816d916ab3a47e80d6c2795a5e9bcaee96a70c1751fb9e67523e7faed2db5a6d2123d773d04a
 SHA512 
2d19aee8c3aef2c4c300382451c1241dd2452180fe28c39eb9fe1bbc9d6c615bb8504535d3cf1cf5fe2ad55def8c43b709e8ecd97f760403cfaee7db977f074c
 DIST snakeyaml-1.16.tar.bz2 234954 BLAKE2B 
dea06c3501ceab4e92b4d125dc882ce7b7773d67ac5526fdf39fafb421f339fe892cfd3f8e80e413aa080fecbc94425842ccabd099d97e1c705eab7025c489e9
 SHA512 
77ef0b1fa2ebe7ab1618745c407436ac6965159e29e1271b0d571006b967bcd94658eb3a8047180ea7c3160eb66ecbac1f24414537a24a81c11fb735ce65e3a4

diff --git a/dev-java/snakeyaml/snakeyaml-1.28.ebuild 
b/dev-java/snakeyaml/snakeyaml-1.28.ebuild
new file mode 100644
index 00000000000..33fed45f021
--- /dev/null
+++ b/dev-java/snakeyaml/snakeyaml-1.28.ebuild
@@ -0,0 +1,86 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Skeleton command:
+# java-ebuilder --generate-ebuild --workdir . --pom pom.xml --download-uri 
https://bitbucket.org/asomov/snakeyaml/get/snakeyaml-1.28.tar.gz --slot 0 
--keywords "~amd64 ~x86" --ebuild snakeyaml-1.28-r1.ebuild
+
+EAPI=7
+
+JAVA_PKG_IUSE="doc source test"
+MAVEN_ID="org.yaml:snakeyaml:1.28"
+JAVA_TESTING_FRAMEWORKS="junit-4"
+
+inherit java-pkg-2 java-pkg-simple
+
+MY_COMMIT="b28f0b4d87c6"
+MY_P="asomov-snakeyaml-${MY_COMMIT}"
+
+DESCRIPTION="YAML 1.1 parser and emitter for Java"
+HOMEPAGE="https://bitbucket.org/asomov/snakeyaml";
+SRC_URI="https://bitbucket.org/asomov/${PN}/get/${P}.tar.gz -> ${MY_P}.tar.gz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+# Compile dependencies
+# POM: pom.xml
+# test? commons-io:commons-io:2.5 -> >=dev-java/commons-io-2.4:1
+# test? joda-time:joda-time:2.10.1 -> >=dev-java/joda-time-2.10.10:0
+# test? junit:junit:4.13.1 -> >=dev-java/junit-4.13.1:4
+# test? org.apache.commons:commons-lang3:3.4 -> >=dev-java/commons-lang-3.4:3.4
+# test? org.apache.velocity:velocity:1.6.2 -> >=dev-java/velocity-1.7:0
+
+DEPEND="
+       >=virtual/jdk-1.8:*
+       test? (
+               >=dev-java/commons-io-2.4:1
+               >=dev-java/commons-lang-3.4:3.4
+               >=dev-java/joda-time-2.10.10:0
+               >=dev-java/velocity-1.7:0
+       )
+"
+
+RDEPEND="
+       >=virtual/jre-1.8:*
+"
+
+S="${WORKDIR}/${MY_P}"
+
+JAVA_SRC_DIR="src/main/java"
+
+JAVA_TEST_GENTOO_CLASSPATH="commons-io-1,joda-time,junit-4,commons-lang-3.4,velocity"
+JAVA_TEST_SRC_DIR="src/test/java"
+JAVA_TEST_RESOURCE_DIRS="src/test/resources"
+
+JAVA_TEST_EXCLUDES=(
+       "examples.spring.TestEntityDescription" # Invalid test class
+       "org.yaml.snakeyaml.constructor.TestBean1"      # Invalid test class
+       "org.yaml.snakeyaml.introspector.TestAnnotation"        # Invalid test 
class
+       "org.yaml.snakeyaml.introspector.TestBean"      # Invalid test class
+       "org.yaml.snakeyaml.ruby.TestObject"    # Invalid test class
+       "org.yaml.snakeyaml.issues.issue154.TestBean"   # Invalid test class
+       "org.yaml.snakeyaml.issues.issue193.TestYaml"   # Invalid test class
+
+       # initializationError(org.yaml.snakeyaml.constructor.TestBean)
+       # java.lang.IllegalArgumentException: Test class can only have one 
constructor
+       "org.yaml.snakeyaml.constructor.TestBean"
+
+       # testTemplate1(org.yaml.snakeyaml.emitter.template.VelocityTest)
+       # java.lang.NullPointerException
+       "org.yaml.snakeyaml.emitter.template.VelocityTest"
+
+       # 
yamlClassInYAMLCL(org.yaml.snakeyaml.issues.issue318.ContextClassLoaderTest)
+       # java.lang.ClassNotFoundException: org.yaml.snakeyaml.Yaml
+       "org.yaml.snakeyaml.issues.issue318.ContextClassLoaderTest"
+
+       "examples.spring.TestEntity"    # Invalid test class
+
+       "org.pyyaml.PyImportTest"       # No tests found in 
org.pyyaml.PyImportTest
+)
+
+src_test() {
+       export EnvironmentKey1="EnvironmentValue1"
+       export EnvironmentEmpty=""
+       java-pkg-simple_src_test
+}

Reply via email to