diff options
Diffstat (limited to 'recipes-core/xerces-j/xerces-j_2.11.0.bb')
| -rw-r--r-- | recipes-core/xerces-j/xerces-j_2.11.0.bb | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/recipes-core/xerces-j/xerces-j_2.11.0.bb b/recipes-core/xerces-j/xerces-j_2.11.0.bb index 98ef32f..45d3c43 100644 --- a/recipes-core/xerces-j/xerces-j_2.11.0.bb +++ b/recipes-core/xerces-j/xerces-j_2.11.0.bb @@ -12,7 +12,13 @@ LIC_FILES_CHKSUM = " \ file://LICENSE.serializer.txt;md5=d229da563da18fe5d58cd95a6467d584 \ " -SRC_URI = "http://archive.apache.org/dist/xerces/j/Xerces-J-src.${PV}.tar.gz" +SRC_URI = "http://archive.apache.org/dist/xerces/j/source/Xerces-J-src.${PV}.tar.gz" + +# CVE only applies to some Oracle Java SE and Red Hat Enterprise Linux versions. +# Already fixed with updates and closed. +# https://access.redhat.com/security/cve/CVE-2018-2799 +# https://bugzilla.redhat.com/show_bug.cgi?id=1567542 +CVE_STATUS[CVE-2018-2799] = "not-applicable-platform: Issue only applies on some Oracle Java SE and Red Hat Enterprise Linux versions" S = "${WORKDIR}/xerces-2_11_0" @@ -22,8 +28,8 @@ JPN = "libxerces2-java" DEPENDS = "fastjar-native jaxp1.3 xml-commons-resolver1.1" -RDEPENDS_${PN} = "libjaxp1.3-java libxml-commons-resolver1.1-java" -RDEPENDS_${PN}_class-native = "" +RDEPENDS:${PN} = "libjaxp1.3-java libxml-commons-resolver1.1-java" +RDEPENDS:${PN}:class-native = "" do_unpackpost[dirs] = "${B}" do_unpackpost() { |