See <https://builds.apache.org/job/ZooKeeper-trunk-owasp/210/display/redirect>
------------------------------------------ [...truncated 26.81 KB...] [ivy:retrieve] found org.jsoup#jsoup;1.11.3 in maven2 [ivy:retrieve] found com.sun.mail#mailapi;1.6.1 in maven2 [ivy:retrieve] found javax.activation#activation;1.1 in maven2 [ivy:retrieve] found com.google.code.gson#gson;2.8.5 in maven2 [ivy:retrieve] found com.h2database#h2;1.4.196 in maven2 [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-ant/3.2.1/dependency-check-ant-3.2.1.jar ... [ivy:retrieve] ............ (26kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-ant;3.2.1!dependency-check-ant.jar (109ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-core/3.2.1/dependency-check-core-3.2.1.jar ... [ivy:retrieve] ................................................... (624kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-core;3.2.1!dependency-check-core.jar (75ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-utils/3.2.1/dependency-check-utils-3.2.1.jar ... [ivy:retrieve] ............... (34kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-utils;3.2.1!dependency-check-utils.jar (25ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/vdurmont/semver4j/2.2.0/semver4j-2.2.0.jar ... [ivy:retrieve] ........... (25kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.vdurmont#semver4j;2.2.0!semver4j.jar (26ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/joda-time/joda-time/1.6/joda-time-1.6.jar ... [ivy:retrieve] ............................................ (522kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] joda-time#joda-time;1.6!joda-time.jar (58ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.16.1/commons-compress-1.16.1.jar ... [ivy:retrieve] .............................................. (546kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.commons#commons-compress;1.16.1!commons-compress.jar (57ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/commons/commons-lang3/3.7/commons-lang3-3.7.jar ... [ivy:retrieve] .......................................... (487kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.commons#commons-lang3;3.7!commons-lang3.jar (67ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/commons/commons-text/1.3/commons-text-1.3.jar ... [ivy:retrieve] ....................... (178kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.commons#commons-text;1.3!commons-text.jar (41ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-core/5.5.5/lucene-core-5.5.5.jar ... [ivy:retrieve] ............................................................................................................................................................ (2314kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-core;5.5.5!lucene-core.jar (191ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-analyzers-common/5.5.5/lucene-analyzers-common-5.5.5.jar ... [ivy:retrieve] ............................................................................................................ (1539kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-analyzers-common;5.5.5!lucene-analyzers-common.jar (61ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-queryparser/5.5.5/lucene-queryparser-5.5.5.jar ... [ivy:retrieve] .................................... (393kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-queryparser;5.5.5!lucene-queryparser.jar (32ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/velocity/velocity/1.7/velocity-1.7.jar ... [ivy:retrieve] ....................................... (438kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.velocity#velocity;1.7!velocity.jar (40ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/glassfish/javax.json/1.0.4/javax.json-1.0.4.jar ... [ivy:retrieve] ................. (83kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.glassfish#javax.json;1.0.4!javax.json.jar(bundle) (27ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/jsoup/jsoup/1.11.3/jsoup-1.11.3.jar ... [ivy:retrieve] .................................... (386kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.jsoup#jsoup;1.11.3!jsoup.jar (41ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/sun/mail/mailapi/1.6.1/mailapi-1.6.1.jar ... [ivy:retrieve] .............................. (292kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.sun.mail#mailapi;1.6.1!mailapi.jar (36ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/code/gson/gson/2.8.5/gson-2.8.5.jar ... [ivy:retrieve] .......................... (235kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.code.gson#gson;2.8.5!gson.jar (31ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/objenesis/objenesis/2.6/objenesis-2.6.jar ... [ivy:retrieve] ............... (54kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.objenesis#objenesis;2.6!objenesis.jar (27ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-queries/5.5.5/lucene-queries-5.5.5.jar ... [ivy:retrieve] ........................... (245kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-queries;5.5.5!lucene-queries.jar (34ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-sandbox/5.5.5/lucene-sandbox-5.5.5.jar ... [ivy:retrieve] .......................... (226kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-sandbox;5.5.5!lucene-sandbox.jar (32ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/commons-lang/commons-lang/2.4/commons-lang-2.4.jar ... [ivy:retrieve] ............................ (255kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] commons-lang#commons-lang;2.4!commons-lang.jar (32ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/javax/activation/activation/1.1/activation-1.1.jar ... [ivy:retrieve] ............... (61kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] javax.activation#activation;1.1!activation.jar (24ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/h2database/h2/1.4.196/h2-1.4.196.jar ... [ivy:retrieve] ........................................................................................................................... (1779kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.h2database#h2;1.4.196!h2.jar (79ms) [ivy:retrieve] :: resolution report :: resolve 7495ms :: artifacts dl 1169ms --------------------------------------------------------------------- | | modules || artifacts | | conf | number| search|dwnlded|evicted|| number|dwnlded| --------------------------------------------------------------------- | owasp | 25 | 22 | 22 | 0 || 25 | 22 | --------------------------------------------------------------------- [ivy:retrieve] :: retrieving :: org.apache.zookeeper#zookeeper [ivy:retrieve] confs: [owasp] [ivy:retrieve] 25 artifacts copied, 0 already retrieved (11579kB/37ms) owasp-taskdef: ivy-retrieve: [ivy:retrieve] :: resolving dependencies :: org.apache.zookeeper#zookeeper;3.6.0-SNAPSHOT [ivy:retrieve] confs: [default] [ivy:retrieve] found jline#jline;2.11 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-server;9.4.10.v20180503 in maven2 [ivy:retrieve] found javax.servlet#javax.servlet-api;3.1.0 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-http;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-util;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-io;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-servlet;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-security;9.4.10.v20180503 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-databind;2.9.5 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-annotations;2.9.0 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-core;2.9.5 in maven2 [ivy:retrieve] found org.slf4j#slf4j-api;1.7.25 in maven2 [ivy:retrieve] found org.slf4j#slf4j-log4j12;1.7.25 in maven2 [ivy:retrieve] found commons-cli#commons-cli;1.2 in maven2 [ivy:retrieve] found log4j#log4j;1.2.17 in maven2 [ivy:retrieve] found org.apache.yetus#audience-annotations;0.5.0 in maven2 [ivy:retrieve] found io.netty#netty-all;4.1.29.Final in maven2 [ivy:retrieve] found com.googlecode.json-simple#json-simple;1.1.1 in maven2 [ivy:retrieve] :: resolution report :: resolve 175ms :: artifacts dl 8ms --------------------------------------------------------------------- | | modules || artifacts | | conf | number| search|dwnlded|evicted|| number|dwnlded| --------------------------------------------------------------------- | default | 18 | 0 | 0 | 0 || 18 | 0 | --------------------------------------------------------------------- [ivy:retrieve] :: retrieving :: org.apache.zookeeper#zookeeper [ivy:retrieve] confs: [default] [ivy:retrieve] 0 artifacts copied, 18 already retrieved (0kB/5ms) owasp: [owasp:dependency-check] Checking for updates [owasp:dependency-check] starting getUpdatesNeeded() ... [owasp:dependency-check] NVD CVE requires several updates; this could take a couple of minutes. [owasp:dependency-check] Download Started for NVD CVE - 2002 [owasp:dependency-check] Download Started for NVD CVE - 2003 [owasp:dependency-check] Download Started for NVD CVE - 2004 [owasp:dependency-check] Download Started for NVD CVE - 2005 [owasp:dependency-check] Download Started for NVD CVE - 2006 [owasp:dependency-check] Download Started for NVD CVE - 2007 [owasp:dependency-check] Download Started for NVD CVE - 2008 [owasp:dependency-check] Download Started for NVD CVE - 2009 [owasp:dependency-check] Download Started for NVD CVE - 2010 [owasp:dependency-check] Download Started for NVD CVE - 2011 [owasp:dependency-check] Download Started for NVD CVE - 2012 [owasp:dependency-check] Download Started for NVD CVE - 2013 [owasp:dependency-check] Download Started for NVD CVE - 2014 [owasp:dependency-check] Download Started for NVD CVE - 2015 [owasp:dependency-check] Download Started for NVD CVE - 2016 [owasp:dependency-check] Download Started for NVD CVE - 2017 [owasp:dependency-check] Download Started for NVD CVE - 2018 [owasp:dependency-check] Download Started for NVD CVE - Modified [owasp:dependency-check] Download Complete for NVD CVE - 2003 (2283 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2003 [owasp:dependency-check] Download Complete for NVD CVE - 2004 (2621 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2004 [owasp:dependency-check] Download Complete for NVD CVE - 2005 (2711 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2005 [owasp:dependency-check] Download Complete for NVD CVE - Modified (2874 ms) [owasp:dependency-check] Processing Started for NVD CVE - Modified [owasp:dependency-check] Download Complete for NVD CVE - 2002 (2972 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2002 [owasp:dependency-check] Download Complete for NVD CVE - 2009 (3059 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2009 [owasp:dependency-check] Download Complete for NVD CVE - 2008 (3094 ms) [owasp:dependency-check] Download Complete for NVD CVE - 2007 (3102 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2008 [owasp:dependency-check] Processing Started for NVD CVE - 2007 [owasp:dependency-check] Download Complete for NVD CVE - 2015 (3129 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2015 [owasp:dependency-check] Download Complete for NVD CVE - 2010 (3235 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2010 [owasp:dependency-check] Download Complete for NVD CVE - 2006 (3320 ms) [owasp:dependency-check] Download Complete for NVD CVE - 2012 (3325 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2006 [owasp:dependency-check] Processing Started for NVD CVE - 2012 [owasp:dependency-check] Download Complete for NVD CVE - 2014 (3335 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2014 [owasp:dependency-check] Download Complete for NVD CVE - 2013 (3462 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2013 [owasp:dependency-check] Download Complete for NVD CVE - 2016 (3491 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2016 [owasp:dependency-check] Download Complete for NVD CVE - 2018 (4252 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2018 [owasp:dependency-check] Download Complete for NVD CVE - 2011 (4306 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2011 [owasp:dependency-check] Download Complete for NVD CVE - 2017 (4813 ms) [owasp:dependency-check] Processing Started for NVD CVE - 2017 [owasp:dependency-check] Processing Complete for NVD CVE - Modified (20356 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2003 (41074 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2004 (67293 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2005 (125617 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2011 (124722 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2010 (139305 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2009 (139828 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2012 (146402 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2013 (146702 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2002 (147417 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2007 (157517 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2015 (157978 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2008 (162147 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2006 (163570 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2014 (175629 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2016 (175477 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2018 (190812 ms) [owasp:dependency-check] Processing Complete for NVD CVE - 2017 (194819 ms) [owasp:dependency-check] Begin database maintenance. [owasp:dependency-check] End database maintenance. [owasp:dependency-check] A new version of dependency-check is available. Consider updating to version 4.0.1. [owasp:dependency-check] Check for updates complete (202986 ms) [owasp:dependency-check] Analysis Started [owasp:dependency-check] Finished Archive Analyzer (0 seconds) [owasp:dependency-check] Finished File Name Analyzer (0 seconds) [owasp:dependency-check] Finished Jar Analyzer (0 seconds) [owasp:dependency-check] Finished Central Analyzer (0 seconds) [owasp:dependency-check] Finished Assembly Analyzer (0 seconds) [owasp:dependency-check] Finished Dependency Merging Analyzer (0 seconds) [owasp:dependency-check] Finished Version Filter Analyzer (0 seconds) [owasp:dependency-check] Finished Hint Analyzer (0 seconds) [owasp:dependency-check] Created CPE Index (2 seconds) [owasp:dependency-check] Skipping CPE Analysis for npm [owasp:dependency-check] Finished CPE Analyzer (3 seconds) [owasp:dependency-check] Finished False Positive Analyzer (0 seconds) [owasp:dependency-check] Finished NVD CVE Analyzer (0 seconds) [owasp:dependency-check] Finished Vulnerability Suppression Analyzer (0 seconds) [owasp:dependency-check] Finished Dependency Bundling Analyzer (0 seconds) [owasp:dependency-check] Analysis Complete (5 seconds) BUILD FAILED <https://builds.apache.org/job/ZooKeeper-trunk-owasp/ws/build.xml>:1707: Dependency-Check Failure: One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '0.0': CVE-2018-8088 See the dependency-check report for more details. Total time: 4 minutes 2 seconds Build step 'Invoke Ant' marked build as failure Archiving artifacts [Fast Archiver] Compressed 501.48 KB of artifacts by 31.9% relative to #199