CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

devel/nexus2-oss2.15.2_1

Maven (and others) artifacts repository manager

Maintainer
michael.osipov@innomotics.com
Packages
nexus2-oss 2.15.2_1
Upstream
Higher version available: 3.97.2-02
CPE
sonatype:nexus from the port
WWW
https://www.sonatype.com/products/repository-oss
Links
cgit · VuXML

Unaddressed (3) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2020-101998.8published 2020-04-01

Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).

CVE-2020-102047.2published 2020-04-01

Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.

CVE-2020-102034.8published 2020-04-01

Sonatype Nexus Repository before 3.21.2 allows XSS.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (3)

VuXML entries whose affected range this version has left.

Commits (28)

Michael Osipov (michaelo) · 2.15.2_1
devel/nexus2-oss: Bump and adapt consumer for sysutils/javaservicewrapper update
a61f1f728f
Michael Osipov (michaelo) · 2.15.2
devel/nexus2-oss: Update to 2.15.2-03

MFH:		2026Q3
52a9f7c5f1
Michael Osipov (michaelo) · 2.15.1_3
devel/nexus2-oss: Limit portscout to version 2.x
eb8cf37dea
Ronald Klop (ronald) · 2.15.1_3
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 2.15.1_2
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Michael Osipov (michaelo) · 2.15.1_1
devel/nexus2-oss: Update port for javaservicewrapper-3.6.3

Approved by:	jrm (mentor), otis (mentor)
Differential Revision:	https://reviews.freebsd.org/D53121
02f1aa59dc
Muhammad Moinur Rahman (bofh) · 2.15.1
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Michael Osipov (michaelo) · 2.15.1
*/*: Update my email address

Since Siemens has sold our subsidiary to KPS Capital Partners we are now
legally a separate company with new public email addresses. Old ones
will go away in the future.

Approved by:	jrm (mentor)
Differential Revision:	https://reviews.freebsd.org/D48171
8881c82cd8
Stefan Eßer (se) · 2.15.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 2.15.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Kurt Jaeger (pi) · 2.15.1
devel/nexus2-oss: update 2.14.20 -> 2.15.1

PR:		263256
Approved by:	Michael Osipov <michael.osipov@siemens.com> (maintainer)
42fc5985a3
Kyle Evans (kevans) · 2.14.20
devel/nexus2-oss: fix inappropriately transcribed patch

PR:		252564
Pointyhat:	kevans
46599b3120
Kyle Evans (kevans) · 2.14.02
devel/nexus2-oss: update to 2.14.20-02

This is primarily a secure release; 2.14.20 also includes:
- [NEXUS-25956] Signatures with ECC algorithm not being recognized

PR:		252564
Security:	b2f1f86f-20e6-11ec-a574-080027eedc6a
Security:	730e922f-20e7-11ec-a574-080027eedc6a
MFH:		2021Q3
1e427d2595
Bernhard Froehlich (decke) · 2.14.18
devel/nexus2-oss: Fix CPE information

Approved by:	portmgr (blanket)
8191add537
Mathieu Arnold (mat) · 2.14.18
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 2.14.18
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 2.14.18
Remove # $FreeBSD$ from Makefiles.
305f148f48
Alexey Dokuchaev (danfe) · 2.14.18
Fix spelling mistakes, typos, poor wording, hyphenation, jargonisms, contractions, "<portname> is ..." cases, missing Oxford commas, and other miscellaneous style bugs in the COMMENT line.
ee895ff14c
Piotr Kubaj (pkubaj) · 2.14.18
devel/nexus2-oss: enable on all architectures

There's no mention at https://help.sonatype.com/repomanager3/installation/system-requirements#SystemRequirements-CPU about required architecture.
ecc2831a5d
Greg Lewis (glewis) · 2.14.18
Update to 2.4.18

PR:		245669
Submitted by:	Michael Osipov <michael.osipov@siemens.com> (MAINTAINER)
2d9a796167
Dmitri Goutnik (dmgk) · 2.14.15
devel/nexus2-oss: Update to 2.14.15-01

PR:		241308
Submitted by:	Michael Osipov <michael.osipov@siemens.com> (maintainer)
Approved by:	tz (mentor, implicit)
84d305eb4e
Steve Wills (swills) · 2.14.14
devel/nexus2-oss: Update to 2.14.14-01

PR:		241143
Submitted by:	Michael Osipov <michael.osipov@siemens.com> (maintainer)
edffa8c878
Baptiste Daroussin (bapt) · 2.14.12
Use pkg's ability to only print messages on removal instead of always echoing a message.
3a16fb4115
Mathieu Arnold (mat) · 2.14.12
Convert to UCL & cleanup pkg-message (categories d)
78d1aff1fc
Steve Wills (swills) · 2.14.12
devel/nexus2-oss: update port to 2.4.12-02

PR:		236521
Submitted by:	Michael Osipov <michael.osipov@siemens.com> (maintainer)
36281a227c
Johannes M Dieterich (jmd) · 2.14.9
devel/nexus2-oss: Update to 2.14.9-01

While there, update maintainer email address.

PR:	222150
Submitted by:	Michael Osipov <michael.osipov@siemens.com> (maintainer)
90c8cea199
Mathieu Arnold (mat) · 2.14.0
Don't quote {} in find -exec calls.

Braces are not shell metacharacters, and they do not need to be quoted.
By the time find parses its arguments and dicovers them, the quoting
will have been removed by the shell anyway.

Sponsored by:	Absolight
8664861b1a
Carlos J. Puga Medina (cpm) · 2.14.0
[NEW PORT] devel/nexus2-oss: Repository management software

Nexus Repository Manager OSS provides you with an essential level of control
over the external repositories you use and the internal repositories you create.
It provides infrastructure and services for organizations that use repository
managers to obtain and deliver software. If you create software libraries or
applications for your end users, you can use Nexus Repository Manager OSS to
distribute your software. If your software depends on open source software
components, you can cache software components from remote repositories.

Nexus Repository Manager OSS features:
- Hosting repositories
- Proxy remote repositories
- Repository groups
- Numerous repository formats
- Hosting project websites
- Fine-grained security model
- Flexible LDAP integration
- Component search
- Scheduled rasks
- REST services
- Integration with m2eclipse

WWW: https://www.sonatype.com/nexus-repository-oss

PR:		203074
Submitted by:	Dusan Vejnovic <freebsd@dussan.org>, Michael Osipov <1983-01-06@gmx.net> (maintainer)
Reviewed by:	feld, junovitch, koobs (mentors)
Approved by:	feld, junovitch, koobs (mentors)
cae43df7ae