CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

Port details

java/apache-bcel6.4.1_2

Apache Commons Byte Code Engineering Library

Maintainer
java@FreeBSD.org
Packages
apache-bcel 6.4.1_2
Upstream
Higher version available: 6.12.0
CPE
apache:commons_bcel
WWW
https://commons.apache.org/proper/commons-bcel/
Links
cgit · VuXML

Unaddressed (1) · The CVE record lists this version as affected, no VuXML entry names the CVE

CVE-2022-429209.8published 2022-11-07

Apache Commons BCEL has a number of APIs that would normally only allow changing specific class characteristics. However, due to an out-of-bounds writing issue, these APIs can be used to produce arbitrary bytecode. This could be abused in applications that pass attacker-controllable data to those APIs, giving the attacker more control over the resulting byt…

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (12)

Ronald Klop (ronald) · 6.4.1_2
*/*: bump portrevision after java_default=25 update

Included all ports that have USES=java.

PR:	293559
86813e9ccf
Ronald Klop (ronald) · 6.4.1_1
*/*: bump portrevision after java_default=21 update

PR:	272855
2baaf16375
Muhammad Moinur Rahman (bofh) · 6.4.1
Mk/**java.mk: Convert bsd.java.mk to USES

The following features have been added or changed:
- Instead of USE_JAVA use USES=java. This defaults to
  USES=java:build,run if NO_BUILD is undefined. Else it defaults to
  USES=java:run
- Instead of USE_ANT=yes use USES=java:ant which also implies
  USES=java:build
- Instead of JAVA_BUILD=yes use USES=java:build. Does not imply run or
  extract
- Instead of JAVA_EXTRACT=yes use USES=java:extract does not imply
  build or run
- Instead of JAVA_RUN=yes use USES=java:run does not imply extract or
  build
- Instead of USE_JAVA=<version> use USES=java and JAVA_VERSION=<version>

Approved by: mat (portmgr), glewis
Differential Revision:  https://reviews.freebsd.org/D48201
0835676e36
Stefan Eßer (se) · 6.4.1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 6.4.1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Po-Chuan Hsieh (sunpoet) · 6.4.1
java/apache-bcel: Update WWW

Approved by:	portmgr (blanket)
6177edf55d
Jimmy Olgeni (olgeni) · 6.4.1
*: fix tab vs. space issues, and comments according to the guide.
4460cf727a
Daniel Engberg (diizzy) · 6.4.1
java/apache-bcel: Update MASTER_SITES

Use a direct URL to Apache's release archive site as it's not mirrored
by upstream mirror sites

Approved by:	tcberner (mentor)
Differential Revision:	https://reviews.freebsd.org/D32386
586d941f79
Mathieu Arnold (mat) · 6.4.1
One more small cleanup, forgotten yesterday. Reported by:	lwhsu
cf118ccf87
Mathieu Arnold (mat) · 6.4.1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Pedro F. Giffuni (pfg) · 6.4.1
java/apache-bcel: update description.

Make clear that it is now an Apache Commons project.

PT:		241122
Approved by:	thierry (mentor), Maintainer timeout.
82c0824a4c
Pedro F. Giffuni (pfg) · 6.4.1
java/jakarta-bcel move to apache- and update to version 6.4.1

The ASF retired Jakarta on 2011 and now bcel is part of Apache Commons.

PR:	241122
Approved by:	thierry (mentor), Maintainer timeout (2+ months)
205bf7a560