5cf299f401
http://maven.apache.org/docs/3.0.5/release-notes.html Apache Maven 3.0.5 is a maintenance release to fix a security issue CVE-2013-0253 Apache Maven 3.0.4 http://maven.apache.org/security.html CVE-2013-0253 Apache Maven 3.0.4 Apache Maven 3.0.4 (with Apache Maven Wagon 2.1) has introduced a non-secure SSL mode by default. This mode disables all SSL certificate checking, including: host name verification , date validity, and certificate chain. Not validating the certificate introduces the possibility of a man-in-the-middle attack. All users are recommended to upgrade to Apache Maven 3.0.5 and Apache Maven Wagon 2.4.
36 lines
1 KiB
Text
36 lines
1 KiB
Text
$NetBSD: patch-bin_mvn,v 1.1 2013/03/03 16:53:42 yyamano Exp $
|
|
|
|
Follow pkgsrc path convention.
|
|
|
|
--- bin/mvn.orig 2013-02-19 13:54:21.000000000 +0000
|
|
+++ bin/mvn
|
|
@@ -69,6 +69,15 @@ if [ -z "$JAVA_HOME" ] ; then
|
|
fi
|
|
fi
|
|
|
|
+if [ "$JAVA_HOME" = "" ] ; then
|
|
+ JAVA_HOME=@JAVA_HOME@
|
|
+fi
|
|
+
|
|
+if [ "$M2_HOME" = "" ] ; then
|
|
+ # try to find maven
|
|
+ M2_HOME=@PREFIX@
|
|
+fi
|
|
+
|
|
if [ -z "$M2_HOME" ] ; then
|
|
## resolve links - $0 may be a link to maven's home
|
|
PRG="$0"
|
|
@@ -166,7 +175,9 @@ fi
|
|
|
|
exec "$JAVACMD" \
|
|
$MAVEN_OPTS \
|
|
- -classpath "${M2_HOME}"/boot/plexus-classworlds-*.jar \
|
|
- "-Dclassworlds.conf=${M2_HOME}/bin/m2.conf" \
|
|
+ -classpath "${M2_HOME}"/lib/java/maven/boot/plexus-classworlds-*.jar \
|
|
+ "-Dclassworlds.conf=${M2_HOME}/etc/maven/m2.conf" \
|
|
"-Dmaven.home=${M2_HOME}" \
|
|
- ${CLASSWORLDS_LAUNCHER} "$@"
|
|
\ No newline at end of file
|
|
+ "-Dorg.apache.maven.global-settings=${M2_HOME}/etc/maven/settings.xml" \
|
|
+ "-Dorg.apache.maven.global-plugin-registry=${M2_HOME}/etc/maven/plugin-registry.xml" \
|
|
+ ${CLASSWORLDS_LAUNCHER} "$@"
|