Name: jackson-databind Version: 2.4.3 %define subrel 2 Release: %mkrel 4 Summary: General data-binding package for Jackson (2.x) License: ASL 2.0 and LGPLv2+ Group: Development/Java URL: http://wiki.fasterxml.com/JacksonHome Source0: https://github.com/FasterXML/jackson-databind/archive/%{name}-%{version}.tar.gz Patch0: CVE-2017-7525.patch Patch1: CVE-2017-15095.patch BuildRequires: mvn(com.fasterxml.jackson:jackson-parent:pom:) BuildRequires: mvn(com.fasterxml.jackson.core:jackson-annotations) >= 2.4.1 BuildRequires: mvn(com.fasterxml.jackson.core:jackson-core) >= 2.4.1 # test deps BuildRequires: mvn(cglib:cglib) BuildRequires: mvn(junit:junit) BuildRequires: mvn(org.codehaus.groovy:groovy) BuildRequires: maven-local BuildRequires: replacer # bundle-plugin Requires #BuildRequires: mvn(org.sonatype.aether:aether) Provides: jackson2-databind = %{version}-%{release} Obsoletes: jackson2-databind < %{version}-%{release} BuildArch: noarch %description General data-binding functionality for Jackson: works on core streaming API. %prep %setup -q -n %{name}-%{name}-%{version} %patch0 -p1 %patch1 cp -p src/main/resources/META-INF/LICENSE . cp -p src/main/resources/META-INF/NOTICE . sed -i 's/\r//' LICENSE NOTICE # unavailable test deps %pom_remove_dep org.hibernate:hibernate-cglib-repack rm src/test/java/com/fasterxml/jackson/databind/interop/TestHibernate.java # Off test that require connection with the web rm src/test/java/com/fasterxml/jackson/databind/ser/TestJdkTypes.java \ src/test/java/com/fasterxml/jackson/databind/deser/TestJdkTypes.java \ src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java %build %mvn_file : %{name} %mvn_build -- -Dmaven.test.failure.ignore=true -Dmaven.javadoc.skip=true %install %mvn_install %files -f .mfiles %doc LICENSE NOTICE README.md release-notes/* %changelog * Sat Nov 04 2017 daviddavid <daviddavid> 2.4.3-4.2.mga5 + Revision: 1175773 - add patch to fix CVE-2017-15095 (mga#21978) + neoclust <neoclust> - Add P0 - Fixes CVE-2017-7525 (mga#21428) * Thu Dec 25 2014 pterjan <pterjan> 2.4.3-4.mga5 + Revision: 805701 - Clean rebuild - Restore - 2.4.3 - Sync with fedora + sander85 <sander85> - Depends on broken java stack + umeabot <umeabot> - Second Mageia 5 Mass Rebuild - Mageia 5 Mass Rebuild + tv <tv> - rebuild for missing pythoneggs deps * Tue Oct 22 2013 umeabot <umeabot> 2.2.2-4.mga4 + Revision: 541324 - Mageia 4 Mass Rebuild * Fri Oct 11 2013 dmorgan <dmorgan> 2.2.2-3.mga4 + Revision: 495504 - imported package jackson-databind * Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild * Mon Jul 22 2013 gil cattaneo <puntogil@libero.it> 2.2.2-2 - review fixes * Tue Jul 16 2013 gil cattaneo <puntogil@libero.it> 2.2.2-1 - 2.2.2 - renamed jackson-databind * Tue May 07 2013 gil cattaneo <puntogil@libero.it> 2.2.1-1 - 2.2.1 * Wed Oct 24 2012 gil cattaneo <puntogil@libero.it> 2.1.0-1 - update to 2.1.0 - renamed jackson2-databind * Thu Sep 13 2012 gil cattaneo <puntogil@libero.it> 2.0.6-1 - initial rpm