%{?scl:%scl_package jackson-databind}

%{!?scl:%global pkg_name %{name}}

Name:          %{?scl_prefix}jackson-databind

Version:       2.7.6

Release:       2.9%{?dist}

Summary:       General data-binding package for Jackson (2.x)

License:       ASL 2.0 and LGPLv2+

URL:           http://wiki.fasterxml.com/JacksonHome

Source0:       https://github.com/FasterXML/jackson-databind/archive/%{pkg_name}-%{version}.tar.gz

Patch0:        CVE-2017-7525.patch

Patch1:        CVE-2017-15095.patch

Patch2:        CVE-2017-17485-1.patch

Patch3:        CVE-2017-17485-2.patch

Patch4:        CVE-2018-11307.patch

Patch5:        CVE-2018-12022.patch

Patch6:        CVE-2018-12023.patch

Patch7:        CVE-2018-14718.patch

Patch8:        CVE-2018-14719.patch

Patch9:        CVE-2018-14720.patch

Patch10:       CVE-2018-14721.patch

Patch11:       CVE-2018-19360.patch

Patch12:       CVE-2018-19361.patch

Patch13:       CVE-2018-19362.patch

Patch14:       CVE-2019-12384.patch

Patch15:       CVE-2019-14379.patch

Patch16:       CVE-2019-17531.patch

Patch17:       CVE-2020_10969-11113-10968-11111-11112.patch

BuildRequires: %{?scl_prefix}maven-local

BuildRequires: %{?scl_prefix}mvn(com.fasterxml.jackson:jackson-parent:pom:)

BuildRequires: %{?scl_prefix}mvn(com.fasterxml.jackson.core:jackson-annotations) >= 2.4.1

BuildRequires: %{?scl_prefix}mvn(com.fasterxml.jackson.core:jackson-core) >= 2.4.1

BuildRequires: %{?scl_prefix}mvn(com.google.guava:guava)

BuildRequires: %{?scl_prefix}mvn(com.google.code.maven-replacer-plugin:replacer)

BuildRequires: %{?scl_prefix}mvn(org.powermock:powermock-api-mockito)

BuildRequires: %{?scl_prefix}mvn(org.powermock:powermock-module-junit4)

BuildArch:     noarch

%description

General data-binding functionality for Jackson:

works on core streaming API.

%package javadoc

Summary:       Javadoc for %{pkg_name}

%description javadoc

This package contains javadoc for %{pkg_name}.

%prep

%setup -q -n %{pkg_name}-%{pkg_name}-%{version}

%patch0 -p1

%patch1

%patch2 -p1

%patch3 -p1

%patch4 -p1

%patch5 -p1

%patch6 -p1

%patch7 -p1

%patch8 -p1

%patch9 -p1

%patch10 -p1

%patch11 -p1

%patch12 -p1

%patch13 -p1

%patch14 -p1

%patch15 -p1

%patch16 -p1

%patch17 -p1

cp -p src/main/resources/META-INF/LICENSE .

cp -p src/main/resources/META-INF/NOTICE .

sed -i 's/\r//' LICENSE NOTICE

# unavailable test deps

%pom_remove_dep javax.measure:jsr-275

rm src/test/java/com/fasterxml/jackson/databind/introspect/NoClassDefFoundWorkaroundTest.java

%pom_xpath_remove pom:classpathDependencyExcludes

%pom_xpath_inject "pom:plugin[pom:artifactId='maven-javadoc-plugin']/pom:configuration" "<additionalparam>-Xdoclint:none</additionalparam>"

%pom_xpath_remove pom:failOnError

# org.powermock.reflect.exceptions.FieldNotFoundException: Field 'fTestClass' was not found in class org.junit.internal.runners.MethodValidator.

rm src/test/java/com/fasterxml/jackson/databind/type/TestTypeFactoryWithClassLoader.java

# Off test that require connection with the web

rm src/test/java/com/fasterxml/jackson/databind/ser/TestJdkTypes.java \

 src/test/java/com/fasterxml/jackson/databind/deser/TestJdkTypes.java \

 src/test/java/com/fasterxml/jackson/databind/TestJDKSerialization.java

%mvn_file : %{pkg_name}

%build

%mvn_build -- -Dmaven.test.failure.ignore=true

%install

%mvn_install

%files -f .mfiles

%doc README.md release-notes/*

%license LICENSE NOTICE

%files javadoc -f .mfiles-javadoc

%license LICENSE NOTICE

%changelog

* Tue Apr 14 2020 Marian Koncek <mkoncek@redhat.com> - 2.7.6-2.9

- Fix security vulnerabilities

- Resolves: CVE-2020-10969, CVE-2020-11113, CVE-2020-10968, CVE-2020-11111,

  CVE-2020-11112

* Wed Dec 04 2019 Marian Koncek <mkoncek@redhat.com> - 2.7.6-2.8

- Fix CVE-2019-17531

* Thu Sep 05 2019 Marian Koncek <mkoncek@redhat.com> - 2.7.6-2.7

- Fix CVE-2019-14379

* Wed Jul 10 2019 Joe Orton <jorton@redhat.com> - 2.7.6-2.6

- fix CVE-2019-12384

* Tue Apr 02 2019 Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7.6-2.5

- Fix various security flaws

- Resolves: CVE-2018-11307, CVE-2018-12022, CVE-2018-12023,

  CVE-2018-14718, CVE-2018-14719, CVE-2018-14720, CVE-2018-14721,

  CVE-2018-19360, CVE-2018-19361, CVE-2018-19362

* Wed Jan 31 2018 Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7.6-2.4

- Fix deserialization vulnerability

- Resolves: CVE-2017-17485

* Tue Dec 19 2017 Mikolaj Izdebski <mizdebsk@redhat.com> - 2.7.6-2.3

- Fix deserialization vulnerability

- Resolves: CVE-2017-7525, CVE-2017-15095

* Thu Jun 22 2017 Michael Simacek <msimacek@redhat.com> - 2.7.6-2.2

- Mass rebuild 2017-06-22

* Wed Jun 21 2017 Java Maintainers <java-maint@redhat.com> - 2.7.6-2.1

- Automated package import and SCL-ization

* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.6-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Mon Aug 22 2016 gil cattaneo <puntogil@libero.it> 2.7.6-1

- update to 2.7.6

* Fri Jun 24 2016 gil cattaneo <puntogil@libero.it> 2.6.7-1

- update to 2.6.7

* Thu May 26 2016 gil cattaneo <puntogil@libero.it> 2.6.6-1

- update to 2.6.6

* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.6.3-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Sun Oct 25 2015 gil cattaneo <puntogil@libero.it> 2.6.3-1

- update to 2.6.3

* Mon Sep 28 2015 gil cattaneo <puntogil@libero.it> 2.6.2-1

- update to 2.6.2

* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.5.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Sat Jan 31 2015 gil cattaneo <puntogil@libero.it> 2.5.0-1

- update to 2.5.0

* Sat Sep 20 2014 gil cattaneo <puntogil@libero.it> 2.4.2-1

- update to 2.4.2

* Wed Jul 23 2014 gil cattaneo <puntogil@libero.it> 2.4.1.3-1

- update to 2.4.1.3

* Thu Jul 03 2014 gil cattaneo <puntogil@libero.it> 2.4.1.1-1

- update to 2.4.1.1

* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Fri Mar 28 2014 Michael Simacek <msimacek@redhat.com> - 2.2.2-4

- Use Requires: java-headless rebuild (#1067528)

* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.2.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Jul 22 2013 gil cattaneo <puntogil@libero.it> 2.2.2-2

- review fixes

* Tue Jul 16 2013 gil cattaneo <puntogil@libero.it> 2.2.2-1

- 2.2.2

- renamed jackson-databind

* Tue May 07 2013 gil cattaneo <puntogil@libero.it> 2.2.1-1

- 2.2.1

* Wed Oct 24 2012 gil cattaneo <puntogil@libero.it> 2.1.0-1

- update to 2.1.0

- renamed jackson2-databind

* Thu Sep 13 2012 gil cattaneo <puntogil@libero.it> 2.0.6-1

- initial rpm