summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPatrice Clement <monsieurp@gentoo.org>2015-10-31 17:31:57 +0000
committerPatrice Clement <monsieurp@gentoo.org>2015-10-31 17:43:38 +0000
commit70e304f4a946ded932efc2a9a2f1637053129802 (patch)
tree6754625b6c14224cea6828f91a2f7106f5f077d3 /dev-java/xstream
parentdev-java/kxml: Keyword for ppc+ppc64+x86. (diff)
downloadgentoo-70e304f4a946ded932efc2a9a2f1637053129802.tar.gz
gentoo-70e304f4a946ded932efc2a9a2f1637053129802.tar.bz2
gentoo-70e304f4a946ded932efc2a9a2f1637053129802.zip
dev-java/xstream: Version bump. Fixes security bug 497652.
Package-Manager: portage-2.2.20.1 Signed-off-by: Patrice Clement <monsieurp@gentoo.org>
Diffstat (limited to 'dev-java/xstream')
-rw-r--r--dev-java/xstream/Manifest1
-rw-r--r--dev-java/xstream/xstream-1.4.8.ebuild56
2 files changed, 57 insertions, 0 deletions
diff --git a/dev-java/xstream/Manifest b/dev-java/xstream/Manifest
index 7b2a3d2133da..5c7dbb5722b8 100644
--- a/dev-java/xstream/Manifest
+++ b/dev-java/xstream/Manifest
@@ -1 +1,2 @@
+DIST xstream-1.4.8-sources.jar 395464 SHA256 5d956e4527d27420f2d417cd77ffafedad85ee795a59857bbf2be9cc630eace0 SHA512 9fb9ebc6facdc07aecbcee3fbf40ef560bdd42cd8f7c7a3a8e2401be5c4e05ed3370beec653ef06d2fd3aa1acabf8f4ada8dddea27f239d180d66aec0bd905e6 WHIRLPOOL 10f9ad97300397000085e4850baa89a2560bd13431c1668b7e144fe53b0800f546ff56cb7bd373a53ea7ab1ff88bef80260e3d8543543c8df50fc5e56fdd8aa2
DIST xstream-distribution-1.3.1-src.zip 7505723 SHA256 df645ea4e2e16c4a149fb45966ea50d48b54776ead4727837348195daad94f6b SHA512 c8c92879a26599d7444fce0638ba13d185fd3c1f42962b92fe1b984d2ea41f8e434acb6af5613ac9f44354816fb7abc60f751f864f36deb9c2413b0caec5c2ac WHIRLPOOL 13ac006402bbecbf6d3ff9fe30662cc6e3807cdf3a391255f878cea37800842adc929914f2e4aace3a7788294809afb26edd64181f85a7e5dc46f3e1f9c0e9b6
diff --git a/dev-java/xstream/xstream-1.4.8.ebuild b/dev-java/xstream/xstream-1.4.8.ebuild
new file mode 100644
index 000000000000..41f26aed963c
--- /dev/null
+++ b/dev-java/xstream/xstream-1.4.8.ebuild
@@ -0,0 +1,56 @@
+# Copyright 1999-2015 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Id$
+
+EAPI=5
+
+JAVA_PKG_IUSE="doc source"
+
+inherit java-pkg-2 java-pkg-simple
+
+DESCRIPTION="A text-processing Java API that serialize objects to XML and back again"
+HOMEPAGE="http://x-stream.github.io"
+SRC_URI="http://central.maven.org/maven2/com/thoughtworks/${PN}/${PN}/${PV}/${P}-sources.jar"
+LICENSE="BSD"
+SLOT="0"
+KEYWORDS="~amd64 ~ppc ~ppc64 ~x86"
+
+CDEPEND="
+ dev-java/kxml:2
+ dev-java/xom:0
+ dev-java/xpp3:0
+ dev-java/cglib:3
+ dev-java/dom4j:1
+ dev-java/jdom:2
+ dev-java/jdom:1.0
+ dev-java/joda-time:0
+ dev-java/jettison:0"
+
+RDEPEND="
+ ${CDEPEND}
+ >=virtual/jre-1.6"
+
+DEPEND="
+ ${CDEPEND}
+ >=virtual/jdk-1.6
+ app-arch/unzip"
+
+JAVA_GENTOO_CLASSPATH="
+ xpp3
+ xom
+ kxml-2
+ jdom-2
+ jdom-1.0
+ dom4j-1
+ cglib-3
+ jettison
+ joda-time"
+
+# Two drivers for two very old implementations of StAX.
+# StAX has been last-rited from Gentoo as it is now part of the Java 6 JDK.
+# See bug 561504. These drivers rely on ancient APIs that aren't maintained
+# upstream and may contain security holes.
+JAVA_RM_FILES=(
+ com/thoughtworks/xstream/io/xml/WstxDriver.java
+ com/thoughtworks/xstream/io/xml/BEAStaxDriver.java
+)