Author: jleroux Date: Sat Dec 5 22:04:39 2015 New Revision: 1718127 URL: http://svn.apache.org/viewvc?rev=1718127&view=rev Log: Removes useless and vulnerable hadoop-hdfs-2.3.0.jar - OFBIZ-6756
The hadoop-hdfs-2.3.0.jar lib has been introduced with the solr component but the hadoop-hdfs-2.6.0.jar is also there and if hadoop-hdfs-2.3.0.jar is removed OFBiz compiles w/o issues. Without hadoop-hdfs-2.3.0.jar the tests pass. Note: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3627 I also changed wrong entries in specialpurpose/LICENCE from 2.2.0 to 2.6.0 Removed: ofbiz/trunk/specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar Modified: ofbiz/trunk/specialpurpose/LICENSE Modified: ofbiz/trunk/specialpurpose/LICENSE URL: http://svn.apache.org/viewvc/ofbiz/trunk/specialpurpose/LICENSE?rev=1718127&r1=1718126&r2=1718127&view=diff ============================================================================== --- ofbiz/trunk/specialpurpose/LICENSE (original) +++ ofbiz/trunk/specialpurpose/LICENSE Sat Dec 5 22:04:39 2015 @@ -37,10 +37,10 @@ specialpurpose/solr/lib/runtime/zookeepe specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-cli-1.2.jar specialpurpose/solr/webapp/solr/WEB-INF/lib/commons-configuration-1.6.jar specialpurpose/solr/webapp/solr/WEB-INF/lib/concurrentlinkedhashmap-lru-1.2.jar -specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.2.0.jar -specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.2.0.jar -specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.2.0.jar -specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.2.0.jar +specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-annotations-2.6.0.jar +specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-auth-2.6.0.jar +specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-common-2.6.0.jar +specialpurpose/solr/webapp/solr/WEB-INF/lib/hadoop-hdfs-2.6.0.jar specialpurpose/solr/webapp/solr/WEB-INF/lib/hppc-0.5.2.jar specialpurpose/solr/webapp/solr/WEB-INF/lib/httpmime-4.3.1.jar specialpurpose/solr/webapp/solr/WEB-INF/lib/lucene-analyzers-kuromoji-4.9.0.jar
