Le Sat, 04 Jun 2022 17:00:15 +0200,
"Dr. Arne Babenhauserheide" a écrit :
> Julien Lepiller writes:
> > What I did instead is, since jdom wants to set more features than
> > supported in the driver, to add dummy support for all these
> > additional features by just not throwing the exception. It
On 2022-06-04 15:47, Julien Lepiller wrote:
> Le Sat, 04 Jun 2022 12:25:21 +0200,
> Remco van 't Veer a écrit :
>
>> I did some digging and found this regression is caused by commit:
>>
>> 6068b83b82475566acd4162467bcf54270f338f9
>> "gnu: java-jdom: Update to 2.0.6.1 [fixes CVE-2021-33813]."
>
Hi,
I was able to build java-plexus-component-metadata using this patch, and
from there maven to clojure-tools.
Cheers,
Futurile
Julien Lepiller writes:
> What I did instead is, since jdom wants to set more features than
> supported in the driver, to add dummy support for all these additional
> features by just not throwing the exception. It's not very satisfying,
> but it works and we don't keep a vulnerable jdom around.
2022/06/04 15:47, Julien Lepiller:
> So I figured I could fix java-plexus-component-metadata that we use to
> generate some xml files during the build of maven. jdom is one of its
> inputs. Adding another jdom to the native inputs would probably not fix
> the issue.
Reverting the jdom upgrade pat
Le Sat, 04 Jun 2022 12:25:21 +0200,
Remco van 't Veer a écrit :
> I did some digging and found this regression is caused by commit:
>
> 6068b83b82475566acd4162467bcf54270f338f9
> "gnu: java-jdom: Update to 2.0.6.1 [fixes CVE-2021-33813]."
>
> Apparently the fix for this issue causes jdom to b
I did some digging and found this regression is caused by commit:
6068b83b82475566acd4162467bcf54270f338f9
"gnu: java-jdom: Update to 2.0.6.1 [fixes CVE-2021-33813]."
Apparently the fix for this issue causes jdom to be very strict;
> java.io.IOException: Invalid input descriptor for merge:
> /
Hi,
I currently cannot get maven, because maven-core fails to build. To reproduce:
guix shell maven
Log:
[mkdir] Created dir:
/tmp/guix-build-maven-core-3.8.5.drv-0/apache-maven-3.8.5/maven-core/build/jar
[jar] Building jar:
/tmp/guix-build-maven-core-3.8.5.drv-0/apache-maven-3.
