From dev-return-69781-archive-asf-public=cust-asf.ponee.io@struts.apache.org Mon Jun 4 00:57:15 2018 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by mx-eu-01.ponee.io (Postfix) with SMTP id 0D7A8180676 for ; Mon, 4 Jun 2018 00:57:14 +0200 (CEST) Received: (qmail 3077 invoked by uid 500); 3 Jun 2018 22:57:14 -0000 Mailing-List: contact dev-help@struts.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Help: List-Post: List-Id: "Struts Developers List" Reply-To: "Struts Developers List" Delivered-To: mailing list dev@struts.apache.org Received: (qmail 3066 invoked by uid 99); 3 Jun 2018 22:57:13 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 03 Jun 2018 22:57:13 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 0D58518081A for ; Sun, 3 Jun 2018 22:57:13 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.01 X-Spam-Level: X-Spam-Status: No, score=-0.01 tagged_above=-999 required=6.31 tests=[KAM_ASCII_DIVIDERS=0.8, KAM_LAZY_DOMAIN_SECURITY=1, KAM_NUMSUBJECT=0.5, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=disabled Received: from mx1-lw-us.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id gGDCPqIL2k1I for ; Sun, 3 Jun 2018 22:57:10 +0000 (UTC) Received: from mailrelay1-us-west.apache.org (mailrelay1-us-west.apache.org [209.188.14.139]) by mx1-lw-us.apache.org (ASF Mail Server at mx1-lw-us.apache.org) with ESMTP id 8053F5F230 for ; Sun, 3 Jun 2018 22:57:10 +0000 (UTC) Received: from jenkins-master.apache.org (unknown [62.210.60.235]) by mailrelay1-us-west.apache.org (ASF Mail Server at mailrelay1-us-west.apache.org) with ESMTP id A9E57E0041 for ; Sun, 3 Jun 2018 22:57:09 +0000 (UTC) Received: from jenkins-master.apache.org (localhost [127.0.0.1]) by jenkins-master.apache.org (ASF Mail Server at jenkins-master.apache.org) with ESMTP id 9FD35A01E1 for ; Sun, 3 Jun 2018 22:57:05 +0000 (UTC) Date: Sun, 3 Jun 2018 22:57:05 +0000 (UTC) From: Apache Jenkins Server To: dev@struts.apache.org Message-ID: <1793321859.4015.1528066625598.JavaMail.jenkins@jenkins-master.apache.org> In-Reply-To: <570368693.3178.1527806333638.JavaMail.jenkins@jenkins-master.apache.org> References: <570368693.3178.1527806333638.JavaMail.jenkins@jenkins-master.apache.org> Subject: Build failed in Jenkins: Struts-master-JDK7-dependency-check #71 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Instance-Identity: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqVKZPv7YyHBB3FvWfV7XQehwe/Ga3aadzSNknt8g382X3uN8A3SOQ+Ixq9HxS+ZlN6XR4TECySmSRy2JN5Rx8svxAD0TjtSF9LuU98dD+LniNDP7Lq6gvRFuJhbMHoS0nuTizDZLsK4X8TW5MyV9w+jFbdoZfRE5O/Mse0fkOeL5uoIS/3Vvu/W+x9QSjDkB7CaU56bPFlQjqqJBl3Cn9r34CkXQZYnLb/NjW4vcpw0+TgMUAPTIVEr5BTPZRshz19g7huwg3zANT5HBIZnzV4hsVY9w4JHkceFdKi/ibNnjPjsFs9pm0HSGJ/RDxjIvSTYT02eH4+m1RAYaj2E9QIDAQAB X-Jenkins-Job: Struts-master-JDK7-dependency-check X-Jenkins-Result: FAILURE See Changes: [amashchenko] Remove deprecated exceptions ------------------------------------------ [...truncated 1.23 MB...] [INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-tiles-plugin --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 18 source files to [INFO] [INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-tiles-plugin --- [WARNING] Warning in manifest for org.apache.struts:struts2-tiles-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache.struts2.views, org.apache, org.apache.struts2, org] [INFO] [INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-tiles-plugin --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory [INFO] Copying 3 resources [INFO] [INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-tiles-plugin --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 4 source files to [INFO] [INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-tiles-plugin --- [INFO] [INFO] ------------------------------------------------------- [INFO] T E S T S [INFO] ------------------------------------------------------- [INFO] Running org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest [INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0, Time elapsed: 0.102 s - in org.apache.struts2.tiles.StrutsTilesAnnotationProcessorTest [INFO] [INFO] Results: [INFO] [INFO] Tests run: 6, Failures: 0, Errors: 0, Skipped: 0 [INFO] [INFO] [INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-tiles-plugin --- [INFO] 51 implicit excludes (use -debug for more details). [INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js [INFO] Exclude: src/site/resources/tags/**/*.html [INFO] Exclude: src/main/resources/*LICENSE.txt [INFO] Exclude: src/test/resources/**/*.txt [INFO] Exclude: src/main/webapp/**/*.css [INFO] Exclude: src/main/webapp/**/*.map [INFO] Exclude: src/main/webapp/**/*.js [INFO] Exclude: src/main/webapp/**/*.svg [INFO] Exclude: src/main/webapp/**/*.txt [INFO] Exclude: src/main/resources/**/sitegraph-usage.txt [INFO] Exclude: src/main/resources/**/docs-urls.txt [INFO] Exclude: src/etc/header.txt [INFO] Exclude: src/main/resources/static/css/**/*.css [INFO] Exclude: src/main/resources/static/js/**/*.js [INFO] Exclude: src/main/resources/docs.cfg [INFO] Exclude: src/main/webapp/fonts/**/* [INFO] 26 resources included (use -debug for more details) [INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 25 licence. [INFO] [INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-tiles-plugin --- [INFO] Building jar: [INFO] [INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-tiles-plugin >>> [INFO] [INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-tiles-plugin <<< [INFO] [INFO] [INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-tiles-plugin --- [INFO] Building jar: [INFO] [INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-tiles-plugin --- [INFO] [INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-tiles-plugin --- [INFO] Checking for updates [INFO] Skipping NVD check since last check was within 4 hours. [INFO] Check for updates complete (224 ms) [INFO] Analysis Started [INFO] Finished Archive Analyzer (0 seconds) [INFO] Finished File Name Analyzer (0 seconds) [INFO] Finished Jar Analyzer (0 seconds) [INFO] Finished Central Analyzer (0 seconds) [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Version Filter Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Created CPE Index (0 seconds) [INFO] Skipping CPE Analysis for npm [INFO] Finished CPE Analyzer (0 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished Cpe Suppression Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Analysis Complete (1 seconds) [INFO] [INFO] ------------------------------------------------------------------------ [INFO] Building Struts 2 DWR Plugin 2.6-SNAPSHOT [INFO] ------------------------------------------------------------------------ [INFO] [INFO] --- maven-remote-resources-plugin:1.5:process (process-resource-bundles) @ struts2-dwr-plugin --- [INFO] [INFO] --- maven-resources-plugin:2.7:resources (default-resources) @ struts2-dwr-plugin --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory [INFO] Copying 3 resources [INFO] [INFO] --- maven-compiler-plugin:3.5.1:compile (default-compile) @ struts2-dwr-plugin --- [INFO] Changes detected - recompiling the module! [INFO] Compiling 1 source file to [INFO] : uses unchecked or unsafe operations. [INFO] : Recompile with -Xlint:unchecked for details. [INFO] [INFO] --- maven-bundle-plugin:2.1.0:manifest (bundle-manifest) @ struts2-dwr-plugin --- [WARNING] Warning in manifest for org.apache.struts:struts2-dwr-plugin:jar:2.6-SNAPSHOT : Superfluous export-package instructions: [org.apache, org.apache.struts2, org] [INFO] [INFO] --- maven-resources-plugin:2.7:testResources (default-testResources) @ struts2-dwr-plugin --- [INFO] Using 'UTF-8' encoding to copy filtered resources. [INFO] skip non existing resourceDirectory [INFO] Copying 3 resources [INFO] [INFO] --- maven-compiler-plugin:3.5.1:testCompile (default-testCompile) @ struts2-dwr-plugin --- [INFO] No sources to compile [INFO] [INFO] --- maven-surefire-plugin:2.20.1:test (default-test) @ struts2-dwr-plugin --- [INFO] [INFO] --- apache-rat-plugin:0.11:check (default) @ struts2-dwr-plugin --- [INFO] 51 implicit excludes (use -debug for more details). [INFO] Exclude: src/main/resources/org/apache/struts2/static/domTT.js [INFO] Exclude: src/site/resources/tags/**/*.html [INFO] Exclude: src/main/resources/*LICENSE.txt [INFO] Exclude: src/test/resources/**/*.txt [INFO] Exclude: src/main/webapp/**/*.css [INFO] Exclude: src/main/webapp/**/*.map [INFO] Exclude: src/main/webapp/**/*.js [INFO] Exclude: src/main/webapp/**/*.svg [INFO] Exclude: src/main/webapp/**/*.txt [INFO] Exclude: src/main/resources/**/sitegraph-usage.txt [INFO] Exclude: src/main/resources/**/docs-urls.txt [INFO] Exclude: src/etc/header.txt [INFO] Exclude: src/main/resources/static/css/**/*.css [INFO] Exclude: src/main/resources/static/js/**/*.js [INFO] Exclude: src/main/resources/docs.cfg [INFO] Exclude: src/main/webapp/fonts/**/* [INFO] 3 resources included (use -debug for more details) [INFO] Rat check: Summary of files. Unapproved: 0 unknown: 0 generated: 0 approved: 3 licence. [INFO] [INFO] --- maven-jar-plugin:3.0.0:jar (default-jar) @ struts2-dwr-plugin --- [INFO] Building jar: [INFO] [INFO] >>> maven-source-plugin:3.0.0:jar (attach-sources) > generate-sources @ struts2-dwr-plugin >>> [INFO] [INFO] <<< maven-source-plugin:3.0.0:jar (attach-sources) < generate-sources @ struts2-dwr-plugin <<< [INFO] [INFO] [INFO] --- maven-source-plugin:3.0.0:jar (attach-sources) @ struts2-dwr-plugin --- [INFO] Building jar: [INFO] [INFO] --- maven-site-plugin:3.5.1:attach-descriptor (attach-descriptor) @ struts2-dwr-plugin --- [INFO] [INFO] --- dependency-check-maven:3.1.1:check (default) @ struts2-dwr-plugin --- [INFO] Checking for updates [INFO] Skipping NVD check since last check was within 4 hours. [INFO] Check for updates complete (224 ms) [INFO] Analysis Started [INFO] Finished Archive Analyzer (0 seconds) [INFO] Finished File Name Analyzer (0 seconds) [INFO] Finished Jar Analyzer (0 seconds) [INFO] Finished Central Analyzer (0 seconds) [INFO] Finished Dependency Merging Analyzer (0 seconds) [INFO] Finished Version Filter Analyzer (0 seconds) [INFO] Finished Hint Analyzer (0 seconds) [INFO] Created CPE Index (0 seconds) [INFO] Skipping CPE Analysis for npm [INFO] Finished CPE Analyzer (0 seconds) [INFO] Finished False Positive Analyzer (0 seconds) [INFO] Finished Cpe Suppression Analyzer (0 seconds) [INFO] Finished NVD CVE Analyzer (0 seconds) [INFO] Finished Vulnerability Suppression Analyzer (0 seconds) [INFO] Finished Dependency Bundling Analyzer (0 seconds) [INFO] Analysis Complete (1 seconds) [WARNING] One or more dependencies were identified with known vulnerabilities in Struts 2 DWR Plugin: dwr-1.1.1.jar (uk.ltd.getahead:dwr:1.1.1, cpe:/a:getahead:direct_web_remoting:1.1.1) : CVE-2007-0185, CVE-2006-6916, CVE-2007-0184 See the dependency-check report for more details. [INFO] ------------------------------------------------------------------------ [INFO] Reactor Summary: [INFO] [INFO] Struts 2 Bill of Materials ......................... SUCCESS [ 1.906 s] [INFO] Struts 2 ........................................... SUCCESS [26:29 min] [INFO] Struts 2 Core ...................................... SUCCESS [01:44 min] [INFO] Struts Plugins ..................................... SUCCESS [ 4.362 s] [INFO] Struts 2 Configuration Browser Plugin .............. SUCCESS [ 4.531 s] [INFO] Struts 2 Sitemesh Plugin ........................... SUCCESS [ 5.576 s] [INFO] Struts 2 Tiles Plugin .............................. SUCCESS [ 6.830 s] [INFO] Struts 2 DWR Plugin ................................ FAILURE [ 4.339 s] [INFO] Struts 2 Spring Plugin ............................. SKIPPED [INFO] Struts 2 Convention Plugin ......................... SKIPPED [INFO] Struts 2 JUnit Plugin .............................. SKIPPED [INFO] Struts 2 JSON Plugin ............................... SKIPPED [INFO] Struts 2 Bean Validation Plugin .................... SKIPPED [INFO] Struts 2 Async Plugin .............................. SKIPPED [INFO] Struts 2 Webapps ................................... SKIPPED [INFO] Struts 2 Showcase Webapp ........................... SKIPPED [INFO] Struts 2 REST Plugin ............................... SKIPPED [INFO] Struts 2 Rest Showcase Webapp ...................... SKIPPED [INFO] Struts 2 CDI Plugin ................................ SKIPPED [INFO] Struts 2 Embedded JSP Plugin ....................... SKIPPED [INFO] Struts 2 GXP Plugin ................................ SKIPPED [INFO] Struts 2 Jasper Reports Plugin ..................... SKIPPED [INFO] Struts 2 Java Templates Plugin ..................... SKIPPED [INFO] Struts 2 JFreeChart Plugin ......................... SKIPPED [INFO] Struts 2 OSGi Plugin ............................... SKIPPED [INFO] Struts 2 OVal Plugin ............................... SKIPPED [INFO] Struts 2 Pell Multipart Plugin ..................... SKIPPED [INFO] Struts 2 Plexus Plugin ............................. SKIPPED [INFO] Struts 2 Portlet Plugin ............................ SKIPPED [INFO] Struts 2 Portlet Tiles Plugin ...................... SKIPPED [INFO] DEPRECATED: Struts 2 Sitegraph Plugin .............. SKIPPED [INFO] Struts 2 TestNG Plugin ............................. SKIPPED [INFO] Struts OSGi Bundles ................................ SKIPPED [INFO] Struts 2 OSGi Admin Bundle ......................... SKIPPED [INFO] Struts 2 OSGi Demo Bundle .......................... SKIPPED [INFO] Struts 2 Assembly .................................. SKIPPED [INFO] ------------------------------------------------------------------------ [INFO] BUILD FAILURE [INFO] ------------------------------------------------------------------------ [INFO] Total time: 28:43 min [INFO] Finished at: 2018-06-03T22:57:03Z [INFO] Final Memory: 67M/1926M [INFO] ------------------------------------------------------------------------ [ERROR] Failed to execute goal org.owasp:dependency-check-maven:3.1.1:check (default) on project struts2-dwr-plugin: [ERROR] [ERROR] One or more dependencies were identified with vulnerabilities that have a CVSS score greater than or equal to '7.0': [ERROR] [ERROR] dwr-1.1.1.jar: CVE-2006-6916, CVE-2007-0184 [ERROR] [ERROR] See the dependency-check report for more details. [ERROR] [ERROR] [ERROR] -> [Help 1] [ERROR] [ERROR] To see the full stack trace of the errors, re-run Maven with the -e switch. [ERROR] Re-run Maven using the -X switch to enable full debug logging. [ERROR] [ERROR] For more information about the errors and possible solutions, please read the following articles: [ERROR] [Help 1] http://cwiki.apache.org/confluence/display/MAVEN/MojoFailureException [ERROR] [ERROR] After correcting the problems, you can resume the build with the command [ERROR] mvn -rf :struts2-dwr-plugin Build step 'Execute shell' marked build as failure [locks-and-latches] Releasing all the locks [locks-and-latches] All the locks released Setting MAVEN_3_LATEST__HOME=/home/jenkins/tools/maven/latest3/ --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscribe@struts.apache.org For additional commands, e-mail: dev-help@struts.apache.org