< back to search

gpp_maybe Security update for maven and recommended update for antlr3, minlog, sbt, xmvn
SUSE-SLE-Module-SUSE-Manager-Server-4.3-2023-2097

This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217)

  • Release Date
    May 4 2023
  • References
    Bugzilla: 1193795
    CVEs: CVE-2021-42550
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Manager Server Module 4.3 ppc64le
  • Packages
    antlr3-java
    Java run-time support for ANTLR-generated parsers
    3.5.3-150200.3.11.8 lock rpm lock src
SUSE Manager Server Module 4.3 x86_64
  • Packages
    antlr3-java
    Java run-time support for ANTLR-generated parsers
    3.5.3-150200.3.11.8 lock rpm lock src
SUSE Manager Server Module 4.3 s390x
  • Packages
    antlr3-java
    Java run-time support for ANTLR-generated parsers
    3.5.3-150200.3.11.8 lock rpm lock src