!20 [sync] PR-16: Limit javax.annotation-api version to 1.2

From: @openeuler-sync-bot 
Reviewed-by: @wangchong1995924 
Signed-off-by: @wangchong1995924
This commit is contained in:
openeuler-ci-bot 2022-02-15 08:23:40 +00:00 committed by Gitee
commit fde20f6428
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F

View File

@ -4,7 +4,7 @@
Name: hibernate-validator
Version: 5.2.4
Release: 4
Release: 5
Summary: Bean Validation 1.1 (JSR 349) Reference Implementation
License: ASL 2.0
URL: http://www.hibernate.org/subprojects/validator.html
@ -21,7 +21,7 @@ Patch7: CVE-2019-10219.patch
BuildRequires: maven-local mvn(com.fasterxml:classmate) mvn(com.sun.xml.bind:jaxb-impl)
BuildRequires: mvn(com.thoughtworks.paranamer:paranamer)
BuildRequires: mvn(javax.annotation:javax.annotation-api) mvn(javax.el:javax.el-api)
BuildRequires: mvn(javax.annotation:javax.annotation-api) = 1.2 mvn(javax.el:javax.el-api)
BuildRequires: mvn(javax.enterprise:cdi-api) mvn(javax.validation:validation-api)
BuildRequires: mvn(javax.xml.bind:jaxb-api) mvn(joda-time:joda-time) mvn(junit:junit)
BuildRequires: mvn(log4j:log4j:1.2.17) mvn(org.apache.felix:maven-bundle-plugin)
@ -144,6 +144,9 @@ rm engine/src/main/java/org/hibernate/validator/internal/engine/valuehandling/Ja
%license copyright.txt license.txt
%changelog
* Mon Nov 29 2021 lingsheng <lingsheng@huawei.com> - 5.2.4-5
- Limit javax.annotation-api version to 1.2
* Mon Aug 23 2021 houyingchao <houyingchao@huawei.com> - 5.2.4-4
- Fix CVE-2019-10219