gpp_maybe Security update for maven and recommended update for antlr3, minlog, sbt, xmvn

SUSE-SLE-Module-Development-Tools-15-SP4-2023-2097

This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217)

• Release Date
  May 4 2023
• References
  Bugzilla: 1193795
  CVEs: CVE-2021-42550
• Type
  security
• Severity
  important

cloud_download Downloads

Development Tools Module 15.4 aarch64

• Packages
  maven
  Java project management and project comprehension tool

  3.8.6-150200.4.9.8 lock rpm lock src

  maven-lib
  Core part of Maven

  3.8.6-150200.4.9.8 lock rpm

  minlog
  Minimal overhead Java logging

  1.3.1-150200.3.7.8 lock rpm lock src

  xmvn
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.0.0-150200.3.7.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.0.0-150200.3.7.3 lock rpm lock src

  xmvn-core
  XMvn Core

  4.0.0-150200.3.7.1 lock rpm

  xmvn-install
  XMvn Install

  4.0.0-150200.3.7.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.0.0-150200.3.7.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.0.0-150200.3.7.8 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.0.0-150200.3.7.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.0.0-150200.3.7.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock src

Development Tools Module 15.4 ppc64le

• Packages
  maven
  Java project management and project comprehension tool

  3.8.6-150200.4.9.8 lock rpm lock src

  maven-lib
  Core part of Maven

  3.8.6-150200.4.9.8 lock rpm

  minlog
  Minimal overhead Java logging

  1.3.1-150200.3.7.8 lock rpm lock src

  xmvn
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.0.0-150200.3.7.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.0.0-150200.3.7.3 lock rpm lock src

  xmvn-core
  XMvn Core

  4.0.0-150200.3.7.1 lock rpm

  xmvn-install
  XMvn Install

  4.0.0-150200.3.7.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.0.0-150200.3.7.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.0.0-150200.3.7.8 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.0.0-150200.3.7.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.0.0-150200.3.7.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock src

Development Tools Module 15.4 s390x

• Packages
  maven
  Java project management and project comprehension tool

  3.8.6-150200.4.9.8 lock rpm lock src

  maven-lib
  Core part of Maven

  3.8.6-150200.4.9.8 lock rpm

  minlog
  Minimal overhead Java logging

  1.3.1-150200.3.7.8 lock rpm lock src

  xmvn
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.0.0-150200.3.7.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.0.0-150200.3.7.3 lock rpm lock src

  xmvn-core
  XMvn Core

  4.0.0-150200.3.7.1 lock rpm

  xmvn-install
  XMvn Install

  4.0.0-150200.3.7.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.0.0-150200.3.7.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.0.0-150200.3.7.8 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.0.0-150200.3.7.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.0.0-150200.3.7.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock src

Development Tools Module 15.4 x86_64

• Packages
  maven
  Java project management and project comprehension tool

  3.8.6-150200.4.9.8 lock rpm lock src

  maven-lib
  Core part of Maven

  3.8.6-150200.4.9.8 lock rpm

  minlog
  Minimal overhead Java logging

  1.3.1-150200.3.7.8 lock rpm lock src

  xmvn
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock rpm lock src

  xmvn-api
  XMvn API

  4.0.0-150200.3.7.1 lock rpm

  xmvn-connector
  XMvn Connector for Maven Resolver

  4.0.0-150200.3.7.3 lock rpm lock src

  xmvn-core
  XMvn Core

  4.0.0-150200.3.7.1 lock rpm

  xmvn-install
  XMvn Install

  4.0.0-150200.3.7.1 lock rpm

  xmvn-minimal
  Dependency-reduced version of XMvn

  4.0.0-150200.3.7.1 lock rpm

  xmvn-mojo
  XMvn MOJO

  4.0.0-150200.3.7.8 lock rpm lock src

  xmvn-resolve
  XMvn Resolver

  4.0.0-150200.3.7.1 lock rpm

  xmvn-subst
  XMvn Subst

  4.0.0-150200.3.7.1 lock rpm

  xmvn-tools
  Local Extensions for Apache Maven

  4.0.0-150200.3.7.1 lock src