Star0
7
代码
代码
Issues26
Pull Requests2
项目讨论
Wiki
分析
Star0
7
已开启
Fix CVE-2026-49877 in activemq #91
jixiang创建于 7月13日
Fix CVE-2026-49877 in activemq #91
已开启
jixiang创建于 7月13日
从gca_u2301_82052726/activemqfix-cve-2026-49877-2003sp4合入到src-openeuler/activemqopenEuler-20.03-LTS-SP4
共 2 个文件变更+57-4
Ractivemq-5.16.8.tar.gz→activemq-5.19.8.tar.gz+0-0
Binary files do not support preview
Mactivemq.spec+57-4
@@ -1,13 +1,14 @@
1%define check_testcase 01%define check_testcase 0
2Name: activemq2Name: activemq
3-Version: 5.16.83+Version: 5.19.8
4-Release: 24+Release: 1
5Summary: Open source messaging and Integration Patterns server5Summary: Open source messaging and Integration Patterns server
6License: Apache-2.06License: Apache-2.0
7URL: http://activemq.apache.org7URL: http://activemq.apache.org
8Source0: https://github.com/apache/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz8Source0: https://github.com/apache/%{name}/archive/refs/tags/%{name}-%{version}.tar.gz
9-Requires: java9+BuildRequires: maven maven-local
10-BuildRequires: maven java10+BuildRequires: java-11-openjdk-devel
11+Requires: java-11-openjdk
11BuildArch: noarch12BuildArch: noarch
12%description13%description
13The most popular and powerful open source messaging and Integration Patterns14The most popular and powerful open source messaging and Integration Patterns
@@ -20,8 +21,37 @@ This package contains javadoc for %{name}.
20 21 
21%prep22%prep
22%autosetup -n %{name}-%{name}-%{version} -p123%autosetup -n %{name}-%{name}-%{version} -p1
24+%pom_remove_plugin org.apache.maven.plugins:maven-enforcer-plugin
25+# Keep build plugins compatible with the Maven version in openEuler-20.03-LTS-SP4.
26+sed -i \
27+ -e 's/<maven-surefire-plugin-version>3.5.2<\/maven-surefire-plugin-version>/<maven-surefire-plugin-version>2.22.2<\/maven-surefire-plugin-version>/g' \
28+ -e 's/<maven-antrun-plugin-version>3.1.0<\/maven-antrun-plugin-version>/<maven-antrun-plugin-version>1.3<\/maven-antrun-plugin-version>/g' \
29+ -e 's/<maven-assembly-plugin-version>3.7.1<\/maven-assembly-plugin-version>/<maven-assembly-plugin-version>3.3.0<\/maven-assembly-plugin-version>/g' \
30+ -e 's/<maven-release-plugin-version>3.1.1<\/maven-release-plugin-version>/<maven-release-plugin-version>2.5.3<\/maven-release-plugin-version>/g' \
31+ -e 's/<maven-enforcer-plugin-version>3.5.0<\/maven-enforcer-plugin-version>/<maven-enforcer-plugin-version>3.0.0<\/maven-enforcer-plugin-version>/g' \
32+ -e 's/<maven-war-plugin-version>3.4.0<\/maven-war-plugin-version>/<maven-war-plugin-version>3.3.2<\/maven-war-plugin-version>/g' \
33+ -e 's/<maven-compiler-plugin-version>3.14.0<\/maven-compiler-plugin-version>/<maven-compiler-plugin-version>3.9.0<\/maven-compiler-plugin-version>/g' \
34+ -e 's/<maven-jar-plugin-version>3.4.2<\/maven-jar-plugin-version>/<maven-jar-plugin-version>3.2.2<\/maven-jar-plugin-version>/g' \
35+ -e 's/<maven-source-plugin-version>3.3.1<\/maven-source-plugin-version>/<maven-source-plugin-version>3.2.1<\/maven-source-plugin-version>/g' \
36+ -e 's/<maven-javadoc-plugin-version>3.11.2<\/maven-javadoc-plugin-version>/<maven-javadoc-plugin-version>3.3.1<\/maven-javadoc-plugin-version>/g' \
37+ -e 's/<maven-shade-plugin-version>3.6.0<\/maven-shade-plugin-version>/<maven-shade-plugin-version>3.2.4<\/maven-shade-plugin-version>/g' \
38+ -e 's/<findbugs-maven-plugin-version>3.0.5<\/findbugs-maven-plugin-version>/<findbugs-maven-plugin-version>3.0.1<\/findbugs-maven-plugin-version>/g' \
39+ -e 's/<javacc-maven-plugin-version>3.1.0<\/javacc-maven-plugin-version>/<javacc-maven-plugin-version>2.6<\/javacc-maven-plugin-version>/g' \
40+ -e 's/<cobertura-maven-plugin-version>2.7<\/cobertura-maven-plugin-version>/<cobertura-maven-plugin-version>2.5.2<\/cobertura-maven-plugin-version>/g' \
41+ -e 's/<taglist-maven-plugin-version>3.2.1<\/taglist-maven-plugin-version>/<taglist-maven-plugin-version>2.4<\/taglist-maven-plugin-version>/g' \
42+ -e 's/<build-helper-maven-plugin-version>3.6.0<\/build-helper-maven-plugin-version>/<build-helper-maven-plugin-version>1.8<\/build-helper-maven-plugin-version>/g' \
43+ -e 's/<apache-rat-plugin-version>0.16.1<\/apache-rat-plugin-version>/<apache-rat-plugin-version>0.13<\/apache-rat-plugin-version>/g' \
44+ -e 's/<depends-maven-plugin-version>1.5.0<\/depends-maven-plugin-version>/<depends-maven-plugin-version>1.2<\/depends-maven-plugin-version>/g' \
45+ -e 's/<maven-dependency-plugin-version>3.6.1<\/maven-dependency-plugin-version>/<maven-dependency-plugin-version>2.8<\/maven-dependency-plugin-version>/g' \
46+ -e 's/<maven-project-info-reports-plugin-version>3.9.0<\/maven-project-info-reports-plugin-version>/<maven-project-info-reports-plugin-version>2.7<\/maven-project-info-reports-plugin-version>/g' \
47+ -e 's/<maven-graph-plugin-version>1.45<\/maven-graph-plugin-version>/<maven-graph-plugin-version>1.30<\/maven-graph-plugin-version>/g' \
48+ -e 's/<maven-plugin-plugin-version>3.15.1<\/maven-plugin-plugin-version>/<maven-plugin-plugin-version>3.6.0<\/maven-plugin-plugin-version>/g' \
49+ pom.xml
50+sed -i 's/jar-no-fork/jar/g' pom.xml
51+sed -i '3i JAVA_HOME=/usr/lib/jvm/jre-11-openjdk\n' assembly/src/release/bin/activemq
23 52 
24%build53%build
54+export JAVA_HOME=%{_jvmdir}/java-11-openjdk
25%if "%{_arch}" == "riscv64"55%if "%{_arch}" == "riscv64"
26export MAVEN_OPTS="-Xms2048M -Xmx8000M"56export MAVEN_OPTS="-Xms2048M -Xmx8000M"
27%endif57%endif
@@ -38,6 +68,8 @@ install -d -m755 %{buildroot}/%{_datadir}/activemq
38cd assembly/target68cd assembly/target
39unzip -d ./file apache-activemq*.zip69unzip -d ./file apache-activemq*.zip
40cd ./file/apache-activemq*70cd ./file/apache-activemq*
71+rm -rf bin/win* bin/*.bat
72+chmod 755 bin/%{name}
41for dir in bin examples webapps webapps-demo conf lib docs;do73for dir in bin examples webapps webapps-demo conf lib docs;do
42 if [ "$dir" = "docs" || "$dir" = "examples" ]74 if [ "$dir" = "docs" || "$dir" = "examples" ]
43 then 75 then
@@ -63,6 +95,24 @@ cp %{name}-%{name}-%{version}/assembly/src/release/bin/env %{buildroot}/%{_datad
63%{_datadir}/javadoc95%{_datadir}/javadoc
64 96 
65%changelog97%changelog
98+* Wed Jul 01 2026 yaoxin <1024769339@qq.com> - 5.19.8-1
99+- Update to 5.19.8 for fix CVEs: CVE-2026-49432, CVE-2026-49434,
100+ CVE-2026-49877, CVE-2026-50734, CVE-2026-52760, CVE-2026-53916,
101+ CVE-2026-53917
102+ 
103+* Thu Jun 11 2026 yaoxin <1024769339@qq.com> - 5.19.7-1
104+- Update to 5.19.7 for fix CVEs: CVE-2026-42253, CVE-2026-42588,
105+ CVE-2026-45505, CVE-2026-46605, CVE-2026-49157, CVE-2026-49270
106+ 
107+* Mon Apr 27 2026 yaoxin <1024769339@qq.com> - 5.19.6-1
108+- Update to 5.19.6 for fix CVE-2026-40466, CVE-2026-41043 and CVE-2026-41044
109+ 
110+* Thu Apr 23 2026 yaoxin <1024769339@qq.com> - 5.19.2-2
111+- Configure JAVA_HOME to resolve test failures
112+ 
113+* Thu Mar 05 2026 yaoxin <1024769339@qq.com> - 5.19.2-1
114+- Update to 5.19.2 for fix CVE-2025-66168
115+ 
66* Wed Jul 02 2025 liweigang <liweiganga@uniontech.com> - 5.16.8-2116* Wed Jul 02 2025 liweigang <liweiganga@uniontech.com> - 5.16.8-2
67- add config file env117- add config file env
68 118 
@@ -78,5 +128,8 @@ cp %{name}-%{name}-%{version}/assembly/src/release/bin/env %{buildroot}/%{_datad
78* Mon Oct 30 2023 yaoxin <yao_xin001@hoperun.com> - 5.15.16-1128* Mon Oct 30 2023 yaoxin <yao_xin001@hoperun.com> - 5.15.16-1
79- Upgrade to 5.15.16 for fix CVE-2023-46604129- Upgrade to 5.15.16 for fix CVE-2023-46604
80 130 
131+* Sat Aug 28 2021 lingsheng <lingsheng@huawei.com> - 5.15.15-2
132+- Fix activemq permission and remove windows related files
133+ 
81* Mon Jul 19 2021 xuping <xuping33@huawei.com> - 5.15.15-1134* Mon Jul 19 2021 xuping <xuping33@huawei.com> - 5.15.15-1
82- package init135- package init