From nobody Fri Dec 17 08:20:27 2021 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 632F018E5DBB; Fri, 17 Dec 2021 08:20:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JFhkN0s1kz3h5r; Fri, 17 Dec 2021 08:20:28 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id F2B9E18890; Fri, 17 Dec 2021 08:20:27 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 1BH8KR1l013386; Fri, 17 Dec 2021 08:20:27 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 1BH8KRgR013385; Fri, 17 Dec 2021 08:20:27 GMT (envelope-from git) Date: Fri, 17 Dec 2021 08:20:27 GMT Message-Id: <202112170820.1BH8KRgR013385@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org From: Alexander Leidinger Subject: git: e9b329f9108e - main - devel/sonarqube-community: update to 9.2.3 List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: netchild X-Git-Repository: ports X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: e9b329f9108e1f915a5a213c3776d41ba785d3af Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1639729228; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=qiKK4E5AV4ibeYQv/ep7HFE/0eju6q9XgIIrLbGATBs=; b=J/ftsBd4oHCREu/9PsX9TTki9V9csH+UV2omE22SXL5QEAu1UPwwp6nA/Lf72kppMoW+UH FGjEh/uvLmAZ/4Yykn16ppjzHRGhEkr01uCWnJR9AdXsDd27p89fIQdBU2/suKpud7jKLu L5w/AP2DbuXOA6VCNYg6RQTZD6WngcRmeX4C7ksmaVkQVQqvYzwHJ4iRRyELLY0f9glFMp biZthsxNZMVoPEj+iTQlW15Y4lsI7aMynVSVAZMXCOO3wRF5K4nfuCgZJhzAH/oEnCvE7u t6gg730DsM+OF1WysM9jBy6RGvB4Lk/T96zFmrl2HzdCRf56EsmK+24Qhn4eNg== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1639729228; a=rsa-sha256; cv=none; b=lLVheC64BYWPoESJlhfGidx/LWUhWkC7/7n/Ksf7tqPB9sDQM/3jBQa2cDOV0AIXFpGVJx 9WFRc9p3hxD2ERdaaJcHfHO/B9RCIJiUQU8cAI7Yni09coCMfMTdTIlj+a9MoFOBHCSywH aU+ooKj2Oh+13krLLhAiufhWBrY6IHkPHwSI9Dip8HQ90j881nVDhtWkJbbg7S0CuRUBC+ kmZsP7GavQ9sVQEZ4jHq3ow7cvpKG4//Gl08r1RQcUUduae1ZKnonLrDtBYgxhpgghwgZI mginhD9oCod/NYwoi35KChRk0zpKIn600t3es3xqvvUbvAUWtOV3CA7OBpqYuQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch main has been updated by netchild: URL: https://cgit.FreeBSD.org/ports/commit/?id=e9b329f9108e1f915a5a213c3776d41ba785d3af commit e9b329f9108e1f915a5a213c3776d41ba785d3af Author: Alexander Leidinger AuthorDate: 2021-12-17 08:14:19 +0000 Commit: Alexander Leidinger CommitDate: 2021-12-17 08:20:24 +0000 devel/sonarqube-community: update to 9.2.3 This is a feel-good release for the log4j vulnerabilities. Log4j is bundled in the included elasticsearch only. Elasticsearch states, that for JDK9+ (the FreeBSD port uses 11+) is not susceptible to either remote code execution or information leakage due to the useage of the Java Security Manager. The updated Elasticsearch in sonarqube has certain components of log4j removed "out of an abundance of caution". Reference: https://discuss.elastic.co/t/apache-log4j2-remote-code-execution-rce-vulnerability-cve-2021-44228-esa-2021-31/291476 --- devel/sonarqube-community/Makefile | 4 +- devel/sonarqube-community/distinfo | 6 +-- devel/sonarqube-community/pkg-plist | 100 +++++++++++++++++++----------------- 3 files changed, 57 insertions(+), 53 deletions(-) diff --git a/devel/sonarqube-community/Makefile b/devel/sonarqube-community/Makefile index 5b02f8fce28d..edd2faa00ee5 100644 --- a/devel/sonarqube-community/Makefile +++ b/devel/sonarqube-community/Makefile @@ -1,6 +1,6 @@ PORTNAME= sonarqube -DISTVERSION= 9.2.1.49989 -PORTREVISION= 3 +DISTVERSION= 9.2.3.50713 +PORTREVISION= 0 CATEGORIES= devel security www java MASTER_SITES= https://binaries.sonarsource.com/Distribution/sonarqube/:m_core \ https://binaries.sonarsource.com/Distribution/sonar-csharp-plugin/:m_csharp \ diff --git a/devel/sonarqube-community/distinfo b/devel/sonarqube-community/distinfo index cd3018b204db..da8caec018fa 100644 --- a/devel/sonarqube-community/distinfo +++ b/devel/sonarqube-community/distinfo @@ -1,6 +1,6 @@ -TIMESTAMP = 1639486424 -SHA256 (sonarqube-9.2.1.49989.zip) = 86d6adb3879f450142d6df766d0f6e197491ec80a6e9f5326bee57d665db578a -SIZE (sonarqube-9.2.1.49989.zip) = 303896929 +TIMESTAMP = 1639728349 +SHA256 (sonarqube-9.2.3.50713.zip) = 0c3639063fe58d46303c8cb0a42f8ae912ff81d0f7b85db44c477b589d2e2533 +SIZE (sonarqube-9.2.3.50713.zip) = 309828548 SHA256 (sonar-csharp-plugin-8.33.0.40503.jar) = 7d06264c0b37395e468eaa065fe9929416e05192ab3b922781a7be629174c40a SIZE (sonar-csharp-plugin-8.33.0.40503.jar) = 5304142 SHA256 (sonar-java-plugin-7.6.0.28201.jar) = a7222621a20a380df78d10d031e3d60b98bdfd8fccf25bbf041ad45404a9a7ff diff --git a/devel/sonarqube-community/pkg-plist b/devel/sonarqube-community/pkg-plist index 2f9eaac92f40..dd2e7f0fc1ba 100644 --- a/devel/sonarqube-community/pkg-plist +++ b/devel/sonarqube-community/pkg-plist @@ -16,7 +16,7 @@ @(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-service-tokens @(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-setup-passwords @(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-sql-cli -@(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-sql-cli-7.14.1.jar +@(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-sql-cli-7.16.1.jar @(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-syskeygen @(,,755) libexec/sonarqube/elasticsearch/bin/elasticsearch-users @(,,755) libexec/sonarqube/elasticsearch/bin/x-pack-env @@ -25,6 +25,7 @@ libexec/sonarqube/elasticsearch/LICENSE.txt libexec/sonarqube/elasticsearch/NOTICE.txt libexec/sonarqube/elasticsearch/README.asciidoc +libexec/sonarqube/elasticsearch/config/elasticsearch-plugins.example.yml libexec/sonarqube/elasticsearch/config/elasticsearch.yml libexec/sonarqube/elasticsearch/config/jvm.options libexec/sonarqube/elasticsearch/config/log4j2.properties @@ -33,45 +34,43 @@ libexec/sonarqube/elasticsearch/config/roles.yml libexec/sonarqube/elasticsearch/config/users libexec/sonarqube/elasticsearch/config/users_roles libexec/sonarqube/elasticsearch/lib/HdrHistogram-2.1.9.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-cli-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-core-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-geo-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-launchers-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-plugin-classloader-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-secure-sm-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/elasticsearch-x-content-7.14.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-cli-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-core-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-geo-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-launchers-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-log4j-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-lz4-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-plugin-classloader-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-secure-sm-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/elasticsearch-x-content-7.16.1.jar libexec/sonarqube/elasticsearch/lib/hppc-0.8.1.jar libexec/sonarqube/elasticsearch/lib/jackson-core-2.10.4.jar libexec/sonarqube/elasticsearch/lib/jackson-dataformat-cbor-2.10.4.jar libexec/sonarqube/elasticsearch/lib/jackson-dataformat-smile-2.10.4.jar libexec/sonarqube/elasticsearch/lib/jackson-dataformat-yaml-2.10.4.jar -libexec/sonarqube/elasticsearch/lib/java-version-checker-7.14.1.jar -libexec/sonarqube/elasticsearch/lib/jna-5.7.0-1.jar +libexec/sonarqube/elasticsearch/lib/java-version-checker-7.16.1.jar +libexec/sonarqube/elasticsearch/lib/jna-5.10.0.jar libexec/sonarqube/elasticsearch/lib/joda-time-2.10.10.jar libexec/sonarqube/elasticsearch/lib/jopt-simple-5.0.2.jar -libexec/sonarqube/elasticsearch/lib/jts-core-1.15.0.jar libexec/sonarqube/elasticsearch/lib/log4j-api-2.11.1.jar -libexec/sonarqube/elasticsearch/lib/log4j-core-2.11.1.jar -libexec/sonarqube/elasticsearch/lib/lucene-analyzers-common-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-backward-codecs-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-core-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-grouping-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-highlighter-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-join-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-memory-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-misc-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-queries-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-queryparser-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-sandbox-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-spatial-extras-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-spatial3d-8.9.0.jar -libexec/sonarqube/elasticsearch/lib/lucene-suggest-8.9.0.jar +libexec/sonarqube/elasticsearch/lib/lucene-analyzers-common-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-backward-codecs-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-core-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-grouping-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-highlighter-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-join-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-memory-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-misc-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-queries-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-queryparser-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-sandbox-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-spatial3d-8.10.1.jar +libexec/sonarqube/elasticsearch/lib/lucene-suggest-8.10.1.jar libexec/sonarqube/elasticsearch/lib/lz4-java-1.8.0.jar libexec/sonarqube/elasticsearch/lib/snakeyaml-1.26.jar -libexec/sonarqube/elasticsearch/lib/spatial4j-0.7.jar libexec/sonarqube/elasticsearch/lib/t-digest-3.2.jar -libexec/sonarqube/elasticsearch/modules/analysis-common/analysis-common-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/analysis-common/analysis-common-7.16.1.jar libexec/sonarqube/elasticsearch/modules/analysis-common/plugin-descriptor.properties libexec/sonarqube/elasticsearch/modules/lang-painless/antlr4-runtime-4.5.3.jar libexec/sonarqube/elasticsearch/modules/lang-painless/asm-7.2.jar @@ -79,30 +78,35 @@ libexec/sonarqube/elasticsearch/modules/lang-painless/asm-analysis-7.2.jar libexec/sonarqube/elasticsearch/modules/lang-painless/asm-commons-7.2.jar libexec/sonarqube/elasticsearch/modules/lang-painless/asm-tree-7.2.jar libexec/sonarqube/elasticsearch/modules/lang-painless/asm-util-7.2.jar -libexec/sonarqube/elasticsearch/modules/lang-painless/elasticsearch-scripting-painless-spi-7.14.1.jar -libexec/sonarqube/elasticsearch/modules/lang-painless/lang-painless-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/lang-painless/lang-painless-7.16.1.jar libexec/sonarqube/elasticsearch/modules/lang-painless/plugin-descriptor.properties libexec/sonarqube/elasticsearch/modules/lang-painless/plugin-security.policy -libexec/sonarqube/elasticsearch/modules/parent-join/parent-join-client-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/lang-painless/spi/elasticsearch-scripting-painless-spi-7.16.1.jar +libexec/sonarqube/elasticsearch/modules/legacy-geo/jts-core-1.15.0.jar +libexec/sonarqube/elasticsearch/modules/legacy-geo/legacy-geo-7.16.1.jar +libexec/sonarqube/elasticsearch/modules/legacy-geo/lucene-spatial-extras-8.10.1.jar +libexec/sonarqube/elasticsearch/modules/legacy-geo/plugin-descriptor.properties +libexec/sonarqube/elasticsearch/modules/legacy-geo/spatial4j-0.7.jar +libexec/sonarqube/elasticsearch/modules/parent-join/parent-join-client-7.16.1.jar libexec/sonarqube/elasticsearch/modules/parent-join/plugin-descriptor.properties -libexec/sonarqube/elasticsearch/modules/percolator/percolator-client-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/percolator/percolator-client-7.16.1.jar libexec/sonarqube/elasticsearch/modules/percolator/plugin-descriptor.properties -libexec/sonarqube/elasticsearch/modules/runtime-fields-common/elasticsearch-dissect-7.14.1.jar -libexec/sonarqube/elasticsearch/modules/runtime-fields-common/elasticsearch-grok-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/runtime-fields-common/elasticsearch-dissect-7.16.1.jar +libexec/sonarqube/elasticsearch/modules/runtime-fields-common/elasticsearch-grok-7.16.1.jar libexec/sonarqube/elasticsearch/modules/runtime-fields-common/jcodings-1.0.44.jar libexec/sonarqube/elasticsearch/modules/runtime-fields-common/joni-2.1.29.jar libexec/sonarqube/elasticsearch/modules/runtime-fields-common/plugin-descriptor.properties -libexec/sonarqube/elasticsearch/modules/runtime-fields-common/runtime-fields-common-7.14.1.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-buffer-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-codec-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-codec-http-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-common-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-handler-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-resolver-4.1.49.Final.jar -libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-transport-4.1.49.Final.jar +libexec/sonarqube/elasticsearch/modules/runtime-fields-common/runtime-fields-common-7.16.1.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-buffer-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-codec-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-codec-http-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-common-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-handler-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-resolver-4.1.66.Final.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/netty-transport-4.1.66.Final.jar libexec/sonarqube/elasticsearch/modules/transport-netty4/plugin-descriptor.properties libexec/sonarqube/elasticsearch/modules/transport-netty4/plugin-security.policy -libexec/sonarqube/elasticsearch/modules/transport-netty4/transport-netty4-client-7.14.1.jar +libexec/sonarqube/elasticsearch/modules/transport-netty4/transport-netty4-client-7.16.1.jar libexec/sonarqube/lib/extensions/sonar-config-plugin-1.1.0.185.jar libexec/sonarqube/lib/extensions/sonar-csharp-plugin-%%SONARCSHARP_VER%%.jar libexec/sonarqube/lib/extensions/sonar-flex-plugin-2.6.2.2641.jar @@ -277,10 +281,10 @@ libexec/sonarqube/web/images/tutorials/jenkins.svg libexec/sonarqube/web/images/tutorials/manual.svg libexec/sonarqube/web/images/tutorials/refresh.svg libexec/sonarqube/web/index.html -libexec/sonarqube/web/js/outV7HKTALN.css -libexec/sonarqube/web/js/outV7HKTALN.css.map -libexec/sonarqube/web/js/outZA7ASMV3.js -libexec/sonarqube/web/js/outZA7ASMV3.js.map +libexec/sonarqube/web/js/out7PZXUY6W.css +libexec/sonarqube/web/js/out7PZXUY6W.css.map +libexec/sonarqube/web/js/outZ4QEXPZ4.js +libexec/sonarqube/web/js/outZ4QEXPZ4.js.map libexec/sonarqube/web/mstile-512x512.png libexec/sonarqube/web/robots.txt @owner sonarqube