See <https://builds.apache.org/job/ZooKeeper-trunk-owasp/250/display/redirect>
------------------------------------------ [...truncated 29.38 KB...] [ivy:retrieve] found com.google.j2objc#j2objc-annotations;1.1 in maven2 [ivy:retrieve] found org.codehaus.mojo#animal-sniffer-annotations;1.17 in maven2 [ivy:retrieve] found com.h3xstream.retirejs#retirejs-core;3.0.1 in maven2 [ivy:retrieve] found org.json#json;20140107 in maven2 [ivy:retrieve] found com.esotericsoftware#minlog;1.3 in maven2 [ivy:retrieve] found com.github.spullara.mustache.java#compiler;0.8.17 in maven2 [ivy:retrieve] found com.h2database#h2;1.4.196 in maven2 [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-ant/4.0.2/dependency-check-ant-4.0.2.jar ... [ivy:retrieve] ............ (27kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-ant;4.0.2!dependency-check-ant.jar (95ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-core/4.0.2/dependency-check-core-4.0.2.jar ... [ivy:retrieve] ..................................................... (669kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-core;4.0.2!dependency-check-core.jar (77ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/owasp/dependency-check-utils/4.0.2/dependency-check-utils-4.0.2.jar ... [ivy:retrieve] ............... (36kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.owasp#dependency-check-utils;4.0.2!dependency-check-utils.jar (28ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/commons/commons-compress/1.18/commons-compress-1.18.jar ... [ivy:retrieve] ................................................ (577kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.commons#commons-compress;1.18!commons-compress.jar (74ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-core/7.6.0/lucene-core-7.6.0.jar ... [ivy:retrieve] ...................................................................................................................................................................................................... (2989kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-core;7.6.0!lucene-core.jar (219ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-analyzers-common/7.6.0/lucene-analyzers-common-7.6.0.jar ... [ivy:retrieve] ................................................................................................................. (1622kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-analyzers-common;7.6.0!lucene-analyzers-common.jar (121ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-queryparser/7.6.0/lucene-queryparser-7.6.0.jar ... [ivy:retrieve] ................................... (372kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-queryparser;7.6.0!lucene-queryparser.jar (36ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/sun/mail/mailapi/1.6.3/mailapi-1.6.3.jar ... [ivy:retrieve] .............................. (291kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.sun.mail#mailapi;1.6.3!mailapi.jar (37ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/guava/guava/27.0.1-jre/guava-27.0.1-jre.jar ... [ivy:retrieve] .................................................................................................................................................................................... (2682kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.guava#guava;27.0.1-jre!guava.jar(bundle) (124ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/h3xstream/retirejs/retirejs-core/3.0.1/retirejs-core-3.0.1.jar ... [ivy:retrieve] ............ (26kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.h3xstream.retirejs#retirejs-core;3.0.1!retirejs-core.jar (25ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-queries/7.6.0/lucene-queries-7.6.0.jar ... [ivy:retrieve] ............................ (258kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-queries;7.6.0!lucene-queries.jar (33ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/apache/lucene/lucene-sandbox/7.6.0/lucene-sandbox-7.6.0.jar ... [ivy:retrieve] ............................. (271kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.apache.lucene#lucene-sandbox;7.6.0!lucene-sandbox.jar (32ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/guava/failureaccess/1.0.1/failureaccess-1.0.1.jar ... [ivy:retrieve] ... (4kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.guava#failureaccess;1.0.1!failureaccess.jar(bundle) (23ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/guava/listenablefuture/9999.0-empty-to-avoid-conflict-with-guava/listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar ... [ivy:retrieve] .. (2kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.guava#listenablefuture;9999.0-empty-to-avoid-conflict-with-guava!listenablefuture.jar (23ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/checkerframework/checker-qual/2.5.2/checker-qual-2.5.2.jar ... [ivy:retrieve] ....................... (188kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.checkerframework#checker-qual;2.5.2!checker-qual.jar (27ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/errorprone/error_prone_annotations/2.2.0/error_prone_annotations-2.2.0.jar ... [ivy:retrieve] ....... (13kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.errorprone#error_prone_annotations;2.2.0!error_prone_annotations.jar (24ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/google/j2objc/j2objc-annotations/1.1/j2objc-annotations-1.1.jar ... [ivy:retrieve] ..... (8kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.google.j2objc#j2objc-annotations;1.1!j2objc-annotations.jar (22ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/codehaus/mojo/animal-sniffer-annotations/1.17/animal-sniffer-annotations-1.17.jar ... [ivy:retrieve] ... (3kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.codehaus.mojo#animal-sniffer-annotations;1.17!animal-sniffer-annotations.jar (23ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/org/json/json/20140107/json-20140107.jar ... [ivy:retrieve] ............... (63kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] org.json#json;20140107!json.jar (24ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/esotericsoftware/minlog/1.3/minlog-1.3.jar ... [ivy:retrieve] .... (5kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.esotericsoftware#minlog;1.3!minlog.jar (23ms) [ivy:retrieve] downloading https://repo1.maven.org/maven2/com/github/spullara/mustache/java/compiler/0.8.17/compiler-0.8.17.jar ... [ivy:retrieve] ................... (113kB) [ivy:retrieve] .. (0kB) [ivy:retrieve] [SUCCESSFUL ] com.github.spullara.mustache.java#compiler;0.8.17!compiler.jar(bundle) (26ms) [ivy:retrieve] :: resolution report :: resolve 5821ms :: artifacts dl 1140ms --------------------------------------------------------------------- | | modules || artifacts | | conf | number| search|dwnlded|evicted|| number|dwnlded| --------------------------------------------------------------------- | owasp | 35 | 21 | 21 | 0 || 35 | 21 | --------------------------------------------------------------------- [ivy:retrieve] :: retrieving :: org.apache.zookeeper#zookeeper [ivy:retrieve] confs: [owasp] [ivy:retrieve] 35 artifacts copied, 0 already retrieved (15405kB/133ms) owasp-taskdef: ivy-retrieve: [ivy:retrieve] :: resolving dependencies :: org.apache.zookeeper#zookeeper;3.6.0-SNAPSHOT [ivy:retrieve] confs: [default] [ivy:retrieve] found jline#jline;2.11 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-server;9.4.10.v20180503 in maven2 [ivy:retrieve] found javax.servlet#javax.servlet-api;3.1.0 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-http;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-util;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-io;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-servlet;9.4.10.v20180503 in maven2 [ivy:retrieve] found org.eclipse.jetty#jetty-security;9.4.10.v20180503 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-databind;2.9.5 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-annotations;2.9.0 in maven2 [ivy:retrieve] found com.fasterxml.jackson.core#jackson-core;2.9.5 in maven2 [ivy:retrieve] found org.slf4j#slf4j-api;1.7.25 in maven2 [ivy:retrieve] found org.slf4j#slf4j-log4j12;1.7.25 in maven2 [ivy:retrieve] found commons-cli#commons-cli;1.2 in maven2 [ivy:retrieve] found com.github.spotbugs#spotbugs-annotations;3.1.9 in maven2 [ivy:retrieve] found com.google.code.findbugs#jsr305;3.0.2 in maven2 [ivy:retrieve] found log4j#log4j;1.2.17 in maven2 [ivy:retrieve] found org.apache.yetus#audience-annotations;0.5.0 in maven2 [ivy:retrieve] found io.netty#netty-all;4.1.29.Final in maven2 [ivy:retrieve] found com.googlecode.json-simple#json-simple;1.1.1 in maven2 [ivy:retrieve] found commons-lang#commons-lang;2.6 in maven2 [ivy:retrieve] :: resolution report :: resolve 251ms :: artifacts dl 12ms --------------------------------------------------------------------- | | modules || artifacts | | conf | number| search|dwnlded|evicted|| number|dwnlded| --------------------------------------------------------------------- | default | 21 | 0 | 0 | 0 || 21 | 0 | --------------------------------------------------------------------- [ivy:retrieve] :: retrieving :: org.apache.zookeeper#zookeeper [ivy:retrieve] confs: [default] [ivy:retrieve] 0 artifacts copied, 21 already retrieved (0kB/6ms) owasp: [owasp:dependency-check-update] Checking for updates [owasp:dependency-check-update] starting getUpdatesNeeded() ... [owasp:dependency-check-update] NVD CVE requires several updates; this could take a couple of minutes. [owasp:dependency-check-update] Download Started for NVD CVE - 2004 [owasp:dependency-check-update] Download Started for NVD CVE - 2005 [owasp:dependency-check-update] Download Started for NVD CVE - 2006 [owasp:dependency-check-update] Download Started for NVD CVE - 2007 [owasp:dependency-check-update] Download Started for NVD CVE - 2008 [owasp:dependency-check-update] Download Started for NVD CVE - 2009 [owasp:dependency-check-update] Download Started for NVD CVE - 2010 [owasp:dependency-check-update] Download Started for NVD CVE - 2011 [owasp:dependency-check-update] Download Started for NVD CVE - 2012 [owasp:dependency-check-update] Download Started for NVD CVE - 2013 [owasp:dependency-check-update] Download Started for NVD CVE - 2014 [owasp:dependency-check-update] Download Started for NVD CVE - 2015 [owasp:dependency-check-update] Download Started for NVD CVE - 2016 [owasp:dependency-check-update] Download Started for NVD CVE - 2017 [owasp:dependency-check-update] Download Started for NVD CVE - 2018 [owasp:dependency-check-update] Download Started for NVD CVE - 2019 [owasp:dependency-check-update] Download Started for NVD CVE - Modified [owasp:dependency-check-update] Download Complete for NVD CVE - 2019 (1879 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2019 [owasp:dependency-check-update] Download Complete for NVD CVE - Modified (2278 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - Modified [owasp:dependency-check-update] Download Complete for NVD CVE - 2004 (2460 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2004 [owasp:dependency-check-update] Download Complete for NVD CVE - 2005 (2714 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2009 (2820 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2005 [owasp:dependency-check-update] Download Complete for NVD CVE - 2008 (2956 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2006 (2976 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2008 [owasp:dependency-check-update] Processing Started for NVD CVE - 2006 [owasp:dependency-check-update] Download Complete for NVD CVE - 2007 (3037 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2009 [owasp:dependency-check-update] Download Complete for NVD CVE - 2010 (3069 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2010 [owasp:dependency-check-update] Processing Started for NVD CVE - 2007 [owasp:dependency-check-update] Download Complete for NVD CVE - 2015 (3267 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2016 (3297 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2012 (3314 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2013 (3337 ms) [owasp:dependency-check-update] Download Complete for NVD CVE - 2014 (3446 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2014 [owasp:dependency-check-update] Download Complete for NVD CVE - 2011 (4294 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2013 [owasp:dependency-check-update] Download Complete for NVD CVE - 2017 (4317 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2012 [owasp:dependency-check-update] Processing Started for NVD CVE - 2015 [owasp:dependency-check-update] Processing Started for NVD CVE - 2016 [owasp:dependency-check-update] Processing Started for NVD CVE - 2017 [owasp:dependency-check-update] Processing Started for NVD CVE - 2011 [owasp:dependency-check-update] Download Complete for NVD CVE - 2018 (4713 ms) [owasp:dependency-check-update] Processing Started for NVD CVE - 2018 [owasp:dependency-check-update] Processing Complete for NVD CVE - 2019 (134387 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - Modified (168452 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2004 (352024 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2005 (462912 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2011 (501968 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2010 (524838 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2009 (535427 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2012 (561007 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2013 (571302 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2015 (597658 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2008 (614004 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2007 (614065 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2006 (614770 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2014 (621447 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2016 (731170 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2018 (802819 ms) [owasp:dependency-check-update] Processing Complete for NVD CVE - 2017 (806830 ms) [owasp:dependency-check-update] Begin database maintenance. [owasp:dependency-check-update] End database maintenance. [owasp:dependency-check-update] Check for updates complete (814783 ms) [owasp:dependency-check-update] Checking for updates [owasp:dependency-check-update] Skipping NVD check since last check was within 4 hours. [owasp:dependency-check-update] Skipping RetireJS update since last update was within 24 hours. [owasp:dependency-check-update] Check for updates complete (16 ms) [owasp:dependency-check-update] Analysis Started [owasp:dependency-check-update] Finished Archive Analyzer (0 seconds) [owasp:dependency-check-update] Finished File Name Analyzer (0 seconds) [owasp:dependency-check-update] Finished Jar Analyzer (0 seconds) [owasp:dependency-check-update] Finished Central Analyzer (0 seconds) [owasp:dependency-check-update] Finished Assembly Analyzer (0 seconds) [owasp:dependency-check-update] Finished Dependency Merging Analyzer (0 seconds) [owasp:dependency-check-update] Finished Version Filter Analyzer (0 seconds) [owasp:dependency-check-update] Finished Hint Analyzer (0 seconds) [owasp:dependency-check-update] Created CPE Index (4 seconds) [owasp:dependency-check-update] Skipping CPE Analysis for npm [owasp:dependency-check-update] Finished CPE Analyzer (4 seconds) [owasp:dependency-check-update] Finished False Positive Analyzer (0 seconds) [owasp:dependency-check-update] Finished NVD CVE Analyzer (0 seconds) [owasp:dependency-check-update] Finished Vulnerability Suppression Analyzer (0 seconds) [owasp:dependency-check-update] Finished Dependency Bundling Analyzer (0 seconds) [owasp:dependency-check-update] Analysis Complete (7 seconds) BUILD FAILED <https://builds.apache.org/job/ZooKeeper-trunk-owasp/ws/build.xml>:1708: Dependency-Check Failure: One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '0.0': CVE-2018-14719, CVE-2018-1000873, CVE-2018-14718, CVE-2018-19362, CVE-2018-19361, CVE-2018-19360, CVE-2018-14721, CVE-2018-14720, CVE-2017-7656, CVE-2017-7658, CVE-2017-7657, CVE-2018-12536, CVE-2018-12056 See the dependency-check report for more details. Total time: 14 minutes 20 seconds Build step 'Invoke Ant' marked build as failure Archiving artifacts [Fast Archiver] Compressed 1.04 MB of artifacts by 12.0% relative to #248
