See
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/1/display/redirect>
------------------------------------------
[...truncated 1.40 MB...]
at junit.framework.TestSuite.runTest(TestSuite.java:252)
[junit-4.12.jar:4.12]
at junit.framework.TestSuite.run(TestSuite.java:247)
[junit-4.12.jar:4.12]
at org.testng.junit.JUnitTestRunner.doRun(JUnitTestRunner.java:250)
[testng-5.14.10.jar:?]
at org.testng.junit.JUnitTestRunner.start(JUnitTestRunner.java:223)
[testng-5.14.10.jar:?]
at org.testng.junit.JUnitTestRunner.run(JUnitTestRunner.java:211)
[testng-5.14.10.jar:?]
at org.testng.TestRunner$1.run(TestRunner.java:659)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.runWorkers(TestRunner.java:1147)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.privateRunJUnit(TestRunner.java:690)
[testng-5.14.10.jar:?]
at org.testng.TestRunner.run(TestRunner.java:597) [testng-5.14.10.jar:?]
at org.testng.SuiteRunner.runTest(SuiteRunner.java:317)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.runSequentially(SuiteRunner.java:312)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.privateRun(SuiteRunner.java:274)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunner.run(SuiteRunner.java:223)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.runSuite(SuiteRunnerWorker.java:52)
[testng-5.14.10.jar:?]
at org.testng.SuiteRunnerWorker.run(SuiteRunnerWorker.java:86)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesSequentially(TestNG.java:1039)
[testng-5.14.10.jar:?]
at org.testng.TestNG.runSuitesLocally(TestNG.java:964)
[testng-5.14.10.jar:?]
at org.testng.TestNG.run(TestNG.java:900) [testng-5.14.10.jar:?]
at
org.apache.maven.surefire.testng.TestNGExecutor.run(TestNGExecutor.java:61)
[surefire-testng-2.6.jar:2.6]
at
org.apache.maven.surefire.testng.TestNGDirectoryTestSuite.execute(TestNGDirectoryTestSuite.java:158)
[surefire-testng-2.6.jar:2.6]
at org.apache.maven.surefire.Surefire.run(Surefire.java:169)
[surefire-api-2.6.jar:2.6]
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
~[?:1.7.0_80]
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
~[?:1.7.0_80]
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
~[?:1.7.0_80]
at java.lang.reflect.Method.invoke(Method.java:606) ~[?:1.7.0_80]
at
org.apache.maven.surefire.booter.SurefireBooter.runSuitesInProcess(SurefireBooter.java:350)
[surefire-booter-2.6.jar:2.6]
at
org.apache.maven.surefire.booter.SurefireBooter.main(SurefireBooter.java:1021)
[surefire-booter-2.6.jar:2.6]
2017-10-22 10:18:12,876 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:12,877 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:12,877 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:12,933 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:12,933 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:12,933 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:12,948 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testActionTagAction
2017-10-22 10:18:12,948 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - execute:
[0ms] - invoke:
[0ms] - invokeAction: testActionTagAction
2017-10-22 10:18:12,983 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:12,983 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:12,983 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:12,999 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testActionTagAction
2017-10-22 10:18:12,999 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - execute:
[0ms] - invoke:
[0ms] - invokeAction: testActionTagAction
[0ms] - executeResult: success
2017-10-22 10:18:13,035 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:13,036 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:13,036 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:13,051 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testActionTagAction
2017-10-22 10:18:13,051 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - execute:
[0ms] - invoke:
[0ms] - invokeAction: testActionTagAction
2017-10-22 10:18:13,085 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:13,086 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:13,086 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:13,101 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testActionTagAction
2017-10-22 10:18:13,102 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [1ms] - execute:
[1ms] - invoke:
[1ms] - invokeAction: testActionTagAction
[0ms] - executeResult: input
2017-10-22 10:18:13,137 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:13,137 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:13,137 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:13,153 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testAction
2017-10-22 10:18:13,156 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [3ms] - execute:
[3ms] - invoke:
[3ms] - interceptorMapping: params
[0ms] - invoke:
[0ms] - invokeAction: testAction
2017-10-22 10:18:13,191 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:13,192 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:13,192 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:13,207 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testAction
2017-10-22 10:18:13,210 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [3ms] - execute:
[3ms] - invoke:
[3ms] - interceptorMapping: params
[0ms] - invoke:
[0ms] - invokeAction: testAction
2017-10-22 10:18:13,244 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ObjectFactory), default mapping already assigned.
2017-10-22 10:18:13,245 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.ActionProxyFactory), default mapping already assigned.
2017-10-22 10:18:13,245 WARN [main] config.AbstractBeanSelectionProvider
(AbstractBeanSelectionProvider.java:88) - Unable to alias bean type
(com.opensymphony.xwork2.security.ExcludedPatternsChecker), default mapping
already assigned.
2017-10-22 10:18:13,259 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [0ms] - create DefaultActionProxy:
[0ms] - actionCreate: testActionTagAction
2017-10-22 10:18:13,260 INFO [main] profiling.UtilTimerStack
(UtilTimerStack.java:385) - [1ms] - execute:
[1ms] - invoke:
[1ms] - invokeAction: testActionTagAction
Tests run: 1742, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 70.913 sec
Results :
Tests run: 1742, Failures: 0, Errors: 0, Skipped: 0
[INFO]
[INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.5.14-SNAPSHOT.jar>
[INFO]
[INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @
struts2-core >>>
[INFO]
[INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @
struts2-core <<<
[INFO]
[INFO]
[INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-core ---
[INFO] Building jar:
<https://builds.apache.org/job/Struts-master-JDK7-dependency-check/ws/core/target/struts2-core-2.5.14-SNAPSHOT-sources.jar>
[INFO]
[INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @
struts2-core ---
[INFO]
[INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-core ---
[INFO] 51 implicit excludes (use -debug for more details).
[INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js
[INFO] Exclude: src/site/resources/tags/**/*.html
[INFO] Exclude: src/main/resources/*LICENSE.txt
[INFO] Exclude: src/test/resources/**/*.txt
[INFO] Exclude: src/main/webapp/**/*.css
[INFO] Exclude: src/main/webapp/**/*.map
[INFO] Exclude: src/main/webapp/**/*.js
[INFO] Exclude: src/main/webapp/**/*.svg
[INFO] Exclude: src/main/webapp/**/*.txt
[INFO] Exclude: src/main/resources/**/sitegraph-usage.txt
[INFO] Exclude: src/main/resources/**/docs-urls.txt
[INFO] Exclude: src/etc/header.txt
[INFO] Exclude: src/main/resources/static/css/**/*.css
[INFO] Exclude: src/main/resources/static/js/**/*.js
[INFO] Exclude: src/main/resources/docs.cfg
[INFO] Exclude: src/main/webapp/fonts/**/*
[INFO] 1564 resources included (use -debug for more details)
[INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0
approved: 1557 licence.
[INFO]
[INFO] --- dependency-check-maven:3.0.1:check (default) @ struts2-core ---
[INFO] Checking for updates
[INFO] Skipping NVD check since last check was within 4 hours.
[INFO] Check for updates complete (11 ms)
[INFO] Analysis Started
[INFO] Finished Archive Analyzer (0 seconds)
[INFO] Finished File Name Analyzer (0 seconds)
[INFO] Finished Jar Analyzer (0 seconds)
[INFO] Finished Central Analyzer (2 seconds)
[INFO] Finished Dependency Merging Analyzer (0 seconds)
[INFO] Finished Version Filter Analyzer (0 seconds)
[INFO] Finished Hint Analyzer (0 seconds)
[INFO] Created CPE Index (0 seconds)
[INFO] Finished CPE Analyzer (1 seconds)
[INFO] Finished False Positive Analyzer (0 seconds)
[INFO] Finished Cpe Suppression Analyzer (0 seconds)
[INFO] Finished NVD CVE Analyzer (0 seconds)
[INFO] Finished Vulnerability Suppression Analyzer (0 seconds)
[INFO] Finished Dependency Bundling Analyzer (0 seconds)
[INFO] Analysis Complete (5 seconds)
[WARNING]
One or more dependencies were identified with known vulnerabilities in Struts 2
Core:
struts-annotations-1.0.6.jar (org.apache.struts:struts-annotations:1.0.6,
cpe:/a:apache:struts:1.0.6) : CVE-2006-1548, CVE-2006-1547, CVE-2006-1546
struts-core-1.3.8.jar (org.apache.struts:struts-core:1.3.8,
cpe:/a:apache:struts:1.3.8) : CVE-2016-1182, CVE-2016-1181, CVE-2015-0899,
CVE-2014-0114
struts-tiles-1.3.8.jar (cpe:/a:apache:tiles:1.3.8, cpe:/a:apache:struts:1.3.8,
org.apache.struts:struts-tiles:1.3.8) : CVE-2016-1182, CVE-2016-1181,
CVE-2015-0899, CVE-2014-0114
bsh-2.0b4.jar (cpe:/a:beanshell_project:beanshell:2.0.b4,
org.beanshell:bsh:2.0b4) : CVE-2016-2510
spring-core-4.1.6.RELEASE.jar (cpe:/a:springsource:spring_framework:4.1.6,
org.springframework:spring-core:4.1.6.RELEASE,
cpe:/a:pivotal_software:spring_framework:4.1.6,
cpe:/a:vmware:springsource_spring_framework:4.1.6,
cpe:/a:pivotal:spring_framework:4.1.6) : CVE-2016-5007, CVE-2015-5211,
CVE-2015-3192
See the dependency-check report for more details.
[INFO] ------------------------------------------------------------------------
[INFO] Reactor Summary:
[INFO]
[INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 1.756 s]
[INFO] Struts 2 ........................................... SUCCESS [06:04 min]
[INFO] Struts 2 Core ...................................... FAILURE [01:45 min]
[INFO] Struts Plugins ..................................... SKIPPED
[INFO] Struts 2 Configuration Browser Plugin .............. SKIPPED
[INFO] Struts 2 Sitemesh Plugin ........................... SKIPPED
[INFO] Struts 2 Tiles Plugin .............................. SKIPPED
[INFO] Struts 2 DWR Plugin ................................ SKIPPED
[INFO] Struts 2 Spring Plugin ............................. SKIPPED
[INFO] Struts 2 Convention Plugin ......................... SKIPPED
[INFO] Struts 2 JUnit Plugin .............................. SKIPPED
[INFO] Struts 2 JSON Plugin ............................... SKIPPED
[INFO] Struts 2 Bean Validation Plugin .................... SKIPPED
[INFO] Struts 2 Webapps ................................... SKIPPED
[INFO] Struts 2 Showcase Webapp ........................... SKIPPED
[INFO] Struts 2 REST Plugin ............................... SKIPPED
[INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED
[INFO] Struts 2 CDI Plugin ................................ SKIPPED
[INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED
[INFO] Struts 2 GXP Plugin ................................ SKIPPED
[INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED
[INFO] Struts 2 Java Templates Plugin ..................... SKIPPED
[INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED
[INFO] Struts 2 OSGi Plugin ............................... SKIPPED
[INFO] Struts 2 OVal Plugin ............................... SKIPPED
[INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED
[INFO] Struts 2 Plexus Plugin ............................. SKIPPED
[INFO] Struts 2 Portlet Plugin ............................ SKIPPED
[INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED
[INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED
[INFO] Struts 2 TestNG Plugin ............................. SKIPPED
[INFO] Struts OSGi Bundles ................................ SKIPPED
[INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED
[INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED
[INFO] Struts 2 Assembly .................................. SKIPPED
[INFO] ------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO] ------------------------------------------------------------------------
[INFO] Total time: 07:54 min
[INFO] Finished at: 2017-10-22T10:18:24Z
[INFO] Final Memory: 91M/6225M
[INFO] ------------------------------------------------------------------------
[ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.0.1:check
(default) on project struts2-core:
[ERROR]
[ERROR] One or more dependencies were identified with vulnerabilities that have
a CVSS score greater than or equal to '8.0':
[ERROR]
[ERROR] spring-core-4.1.6.RELEASE.jar: CVE-2015-5211
[ERROR]
[ERROR] See the dependency-check report for more details.
[ERROR]
[ERROR]
[ERROR] -> [Help 1]
[ERROR]
[ERROR] To see the full stack trace of the errors, re-run Maven with the -e
switch.
[ERROR] Re-run Maven using the -X switch to enable full debug logging.
[ERROR]
[ERROR] For more information about the errors and possible solutions, please
read the following articles:
[ERROR] [Help 1]
http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException
[ERROR]
[ERROR] After correcting the problems, you can resume the build with the command
[ERROR] mvn <goals> -rf :struts2-core
Build step 'Execute shell' marked build as failure
[locks-and-latches] Releasing all the locks
[locks-and-latches] All the locks released
Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@struts.apache.org
For additional commands, e-mail: dev-h...@struts.apache.org
