{"action":"created","issue":{"url":"https://api.github.com/repos/pentaho/mql-editor/issues/56","repository_url":"https://api.github.com/repos/pentaho/mql-editor","labels_url":"https://api.github.com/repos/pentaho/mql-editor/issues/56/labels{/name}","comments_url":"https://api.github.com/repos/pentaho/mql-editor/issues/56/comments","events_url":"https://api.github.com/repos/pentaho/mql-editor/issues/56/events","html_url":"https://github.com/pentaho/mql-editor/pull/56","id":375913014,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI3MjQ2NDY4","number":56,"title":"[SP-4686] Backport of PPP-4182 - Use of vulnerable component dom4j-1.…","user":{"login":"pentaho-lmartins","id":33635091,"node_id":"MDQ6VXNlcjMzNjM1MDkx","avatar_url":"https://avatars3.githubusercontent.com/u/33635091?v=4","gravatar_id":"","url":"https://api.github.com/users/pentaho-lmartins","html_url":"https://github.com/pentaho-lmartins","followers_url":"https://api.github.com/users/pentaho-lmartins/followers","following_url":"https://api.github.com/users/pentaho-lmartins/following{/other_user}","gists_url":"https://api.github.com/users/pentaho-lmartins/gists{/gist_id}","starred_url":"https://api.github.com/users/pentaho-lmartins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pentaho-lmartins/subscriptions","organizations_url":"https://api.github.com/users/pentaho-lmartins/orgs","repos_url":"https://api.github.com/users/pentaho-lmartins/repos","events_url":"https://api.github.com/users/pentaho-lmartins/events{/privacy}","received_events_url":"https://api.github.com/users/pentaho-lmartins/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-10-31T11:16:57Z","updated_at":"2018-10-31T11:19:00Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/pentaho/mql-editor/pulls/56","html_url":"https://github.com/pentaho/mql-editor/pull/56","diff_url":"https://github.com/pentaho/mql-editor/pull/56.diff","patch_url":"https://github.com/pentaho/mql-editor/pull/56.patch"},"body":"…6.1.jar  CVE-2018-1000632 (7.1 Suite)\r\n\r\n@cravobranco "},"comment":{"url":"https://api.github.com/repos/pentaho/mql-editor/issues/comments/434649975","html_url":"https://github.com/pentaho/mql-editor/pull/56#issuecomment-434649975","issue_url":"https://api.github.com/repos/pentaho/mql-editor/issues/56","id":434649975,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNDY0OTk3NQ==","user":{"login":"wingman-pentaho","id":18704365,"node_id":"MDQ6VXNlcjE4NzA0MzY1","avatar_url":"https://avatars1.githubusercontent.com/u/18704365?v=4","gravatar_id":"","url":"https://api.github.com/users/wingman-pentaho","html_url":"https://github.com/wingman-pentaho","followers_url":"https://api.github.com/users/wingman-pentaho/followers","following_url":"https://api.github.com/users/wingman-pentaho/following{/other_user}","gists_url":"https://api.github.com/users/wingman-pentaho/gists{/gist_id}","starred_url":"https://api.github.com/users/wingman-pentaho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wingman-pentaho/subscriptions","organizations_url":"https://api.github.com/users/wingman-pentaho/orgs","repos_url":"https://api.github.com/users/wingman-pentaho/repos","events_url":"https://api.github.com/users/wingman-pentaho/events{/privacy}","received_events_url":"https://api.github.com/users/wingman-pentaho/received_events","type":"User","site_admin":false},"created_at":"2018-10-31T11:19:00Z","updated_at":"2018-10-31T11:19:00Z","author_association":"NONE","body":"### Build Failed\n\n:x: Something went wrong while validating this pull request.\n\n#### Build Commands\n\n```sh\nant -Dtestreports.dir=bin/reports/unit-test -f pentaho-mql-editor/build.xml clean-all resolve jacoco && ant -f pentaho-mql-editor/build.xml checkstyle publish-local\n```\n\n##### Stdout log\n###### (last 100 lines)\n\n```console\n[ivy:resolve] \tfound org.netbeans#openide-util;200507110943 in pentaho-mvn\n[ivy:resolve] \tfound org.netbeans#nbmdr;200507110943-custom in pentaho-mvn\n[ivy:resolve] \tfound pentaho#pentaho-registry;7.1-SNAPSHOT in pentaho-ivy\n[ivy:resolve] \tfound org.owasp.encoder#encoder;1.2 in pentaho-mvn\n[ivy:resolve] \tfound pentaho-kettle#kettle-engine;7.1-SNAPSHOT in pentaho-ivy\n[ivy:resolve] \tfound pentaho-kettle#kettle-core;7.1-SNAPSHOT in local\n[ivy:resolve] \tfound org.samba.jcifs#jcifs;1.3.3 in pentaho-mvn\n[ivy:resolve] \tfound pentaho#metastore;7.1-SNAPSHOT in pentaho-mvn\n[ivy:resolve] \tfound org.apache.commons#commons-compress;1.4.1 in pentaho-mvn\n[ivy:resolve] \tfound org.eclipse.jetty#jetty-util;8.1.15.v20140411 in pentaho-mvn\n[ivy:resolve] \tfound com.jcraft#jsch;0.1.54 in pentaho-mvn\n[ivy:resolve] \tfound com.jcraft#jzlib;1.0.7 in pentaho-mvn\n[ivy:resolve] \tfound net.sf.scannotation#scannotation;1.0.2 in pentaho-mvn\n[ivy:resolve] \tfound com.wcohen#com.wcohen.secondstring;0.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-bridge;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-css;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-gvt;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-svg-dom;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-transcoder;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-codec;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-util;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-ext;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-xml;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-anim;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-parser;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-script;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-constants;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.xmlgraphics#batik-i18n;1.9.1 in pentaho-mvn\n[ivy:resolve] \tfound xml-apis#xml-apis-ext;1.3.04 in pentaho-mvn\n[ivy:resolve] \tfound org.apache.karaf#org.apache.karaf.main;3.0.3 in pentaho-mvn\n[ivy:resolve] \tfound pentaho#pentaho-cwm;1.5.4 in pentaho-ivy\n[ivy:resolve] \tfound org.pentaho.reporting.library#libformula;7.1-SNAPSHOT in pentaho-mvn\n[ivy:resolve] \tfound org.pentaho.reporting.library#libbase;7.1-SNAPSHOT in pentaho-mvn\n[ivy:resolve] \tfound org.apache.commons#commons-vfs2;2.1 in pentaho-mvn\n[ivy:resolve] \tfound wsdl4j#wsdl4j;1.6.2 in pentaho-mvn\n[ivy:resolve] \tfound pentaho#pentaho-versionchecker;7.1-SNAPSHOT in pentaho-mvn\n[ivy:resolve] downloading http://ivy-nexus.pentaho.org/content/groups/omni/junit/junit/4.3.1/junit-4.3.1.jar ...\n[ivy:resolve] ...... (104kB)\n[ivy:resolve] .. (0kB)\n[ivy:resolve] \t[SUCCESSFUL ] junit#junit;4.3.1!junit.jar (1377ms)\n[ivy:resolve] downloading http://ivy-nexus.pentaho.org/content/groups/omni/xml-apis/xml-apis/1.0.b2/xml-apis-1.0.b2.jar ...\n[ivy:resolve] .... (106kB)\n[ivy:resolve] .. (0kB)\n[ivy:resolve] \t[SUCCESSFUL ] xml-apis#xml-apis;1.0.b2!xml-apis.jar (81ms)\n[ivy:resolve] :: resolution report :: resolve 10848ms :: artifacts dl 1527ms\n[ivy:resolve] \t:: evicted modules:\n[ivy:resolve] \tcommons-logging#commons-logging;1.2 by [commons-logging#commons-logging;1.1.3] in [test]\n[ivy:resolve] \torg.slf4j#slf4j-api;1.6.1 by [org.slf4j#slf4j-api;1.7.7] in [test]\n[ivy:resolve] \tcommons-lang#commons-lang;2.4 by [commons-lang#commons-lang;2.6] in [test]\n[ivy:resolve] \tcommons-io#commons-io;2.2 by [commons-io#commons-io;2.1] in [test]\n[ivy:resolve] \tcommons-logging#commons-logging;1.1.1 by [commons-logging#commons-logging;1.1.3] in [test]\n[ivy:resolve] \tcommons-codec#commons-codec;1.5 by [commons-codec#commons-codec;1.9] in [test]\n[ivy:resolve] \tcommons-dbcp#commons-dbcp;1.2.1 by [commons-dbcp#commons-dbcp;1.4] in [test]\n[ivy:resolve] \tlog4j#log4j;1.2.16 by [log4j#log4j;1.2.17] in [test]\n[ivy:resolve] \tcommons-pool#commons-pool;1.5.4 by [commons-pool#commons-pool;1.5.7] in [test]\n[ivy:resolve] \torg.apache.commons#commons-vfs2;2.1-20150824 by [org.apache.commons#commons-vfs2;2.1] in [test]\n[ivy:resolve] \tcommons-io#commons-io;1.4 by [commons-io#commons-io;2.1] in [test]\n\t---------------------------------------------------------------------\n\t|                  |            modules            ||   artifacts   |\n\t|       conf       | number| search|dwnlded|evicted|| number|dwnlded|\n\t---------------------------------------------------------------------\n\t|       test       |  120  |   3   |   2   |   11  ||  114  |   2   |\n\t---------------------------------------------------------------------\n[ivy:resolve] \n[ivy:resolve] :: problems summary ::\n[ivy:resolve] :::: WARNINGS\n[ivy:resolve] \t\tmodule not found: org.dom4j#dom4j;working@fd41d4bf9e76\n[ivy:resolve] \t==== local: tried\n[ivy:resolve] \t  /home/buildguy/.ivy2/local/org.dom4j/dom4j/working@fd41d4bf9e76/ivys/ivy.xml\n[ivy:resolve] \t  -- artifact org.dom4j#dom4j;working@fd41d4bf9e76!dom4j.jar:\n[ivy:resolve] \t  /home/buildguy/.ivy2/local/org.dom4j/dom4j/working@fd41d4bf9e76/jars/dom4j-working@fd41d4bf9e76.jar\n[ivy:resolve] \t==== pentaho-ivy: tried\n[ivy:resolve] \t  http://ivy-nexus.pentaho.org/content/groups/omni/org.dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.ivy.xml\n[ivy:resolve] \t==== pentaho-mvn: tried\n[ivy:resolve] \t  http://ivy-nexus.pentaho.org/content/groups/omni/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.pom\n[ivy:resolve] \t  -- artifact org.dom4j#dom4j;working@fd41d4bf9e76!dom4j.jar:\n[ivy:resolve] \t  http://ivy-nexus.pentaho.org/content/groups/omni/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.jar\n[ivy:resolve] \t==== local-mvn: tried\n[ivy:resolve] \t  file:////home/buildguy/.m2/repository/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.pom\n[ivy:resolve] \t  -- artifact org.dom4j#dom4j;working@fd41d4bf9e76!dom4j.jar:\n[ivy:resolve] \t  file:////home/buildguy/.m2/repository/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.jar\n[ivy:resolve] \t==== public-maven: tried\n[ivy:resolve] \t  http://ivy-nexus.pentaho.org/content/groups/omni/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.pom\n[ivy:resolve] \t  -- artifact org.dom4j#dom4j;working@fd41d4bf9e76!dom4j.jar:\n[ivy:resolve] \t  http://ivy-nexus.pentaho.org/content/groups/omni/org/dom4j/dom4j/working@fd41d4bf9e76/dom4j-working@fd41d4bf9e76.jar\n[ivy:resolve] \t\t::::::::::::::::::::::::::::::::::::::::::::::\n[ivy:resolve] \t\t::          UNRESOLVED DEPENDENCIES         ::\n[ivy:resolve] \t\t::::::::::::::::::::::::::::::::::::::::::::::\n[ivy:resolve] \t\t:: org.dom4j#dom4j;working@fd41d4bf9e76: not found\n[ivy:resolve] \t\t::::::::::::::::::::::::::::::::::::::::::::::\n[ivy:resolve] \n[ivy:resolve] :: USE VERBOSE OR DEBUG MESSAGE LEVEL FOR MORE DETAILS\n\nBUILD FAILED\n/home/buildguy/project/pentaho-mql-editor/build-res/subfloor.xml:904: impossible to resolve dependencies:\n\tresolve failed - see output for details\n\nTotal time: 42 seconds\nrm: cannot remove '/home/buildguy/.ivy2/local': No such file or directory\nno publish local to remove\n```\n\n#### Stderr log\n###### (last 100 lines)\n\n```console\njava.lang.Exception: org.pentaho.build.buddy.bundles.orchestrator.OrchestratorImpl$BuildException: java.io.IOException: Head build returned with code 1\n\tat org.pentaho.build.buddy.bundles.orchestrator.OrchestratorImpl.orchestrate(OrchestratorImpl.java:381)\n\tat Proxy846294a0_fa77_4de0_b964_5c9522b2e0dd.orchestrate(Unknown Source)\n\tat org.pentaho.build.buddy.bundles.rest.OrchestratorRestService$1.write(OrchestratorRestService.java:62)\n\tat org.apache.cxf.jaxrs.provider.BinaryDataProvider.writeTo(BinaryDataProvider.java:172)\n\tat org.apache.cxf.jaxrs.utils.JAXRSUtils.writeMessageBody(JAXRSUtils.java:1381)\n\tat org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.serializeMessage(JAXRSOutInterceptor.java:244)\n\tat org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.processResponse(JAXRSOutInterceptor.java:120)\n\tat org.apache.cxf.jaxrs.interceptor.JAXRSOutInterceptor.handleMessage(JAXRSOutInterceptor.java:83)\n\tat org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)\n\tat org.apache.cxf.interceptor.OutgoingChainInterceptor.handleMessage(OutgoingChainInterceptor.java:83)\n\tat org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:308)\n\tat org.apache.cxf.transport.ChainInitiationObserver.onMessage(ChainInitiationObserver.java:121)\n\tat org.apache.cxf.transport.http.AbstractHTTPDestination.invoke(AbstractHTTPDestination.java:253)\n\tat org.apache.cxf.transport.servlet.ServletController.invokeDestination(ServletController.java:234)\n\tat org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:208)\n\tat org.apache.cxf.transport.servlet.ServletController.invoke(ServletController.java:160)\n\tat org.apache.cxf.transport.servlet.CXFNonSpringServlet.invoke(CXFNonSpringServlet.java:180)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.handleRequest(AbstractHTTPServlet.java:298)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.doPost(AbstractHTTPServlet.java:217)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:707)\n\tat org.apache.cxf.transport.servlet.AbstractHTTPServlet.service(AbstractHTTPServlet.java:273)\n\tat org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:812)\n\tat org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:587)\n\tat org.ops4j.pax.web.service.jetty.internal.HttpServiceServletHandler.doHandle(HttpServiceServletHandler.java:71)\n\tat org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)\n\tat org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:577)\n\tat org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:223)\n\tat org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)\n\tat org.ops4j.pax.web.service.jetty.internal.HttpServiceContext.doHandle(HttpServiceContext.java:287)\n\tat org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)\n\tat org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)\n\tat org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)\n\tat org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)\n\tat org.ops4j.pax.web.service.jetty.internal.JettyServerHandlerCollection.handle(JettyServerHandlerCollection.java:80)\n\tat org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)\n\tat org.eclipse.jetty.server.Server.handle(Server.java:499)\n\tat org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311)\n\tat org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)\n\tat org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)\n\tat org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)\n\tat java.lang.Thread.run(Thread.java:748)\nCaused by: org.pentaho.build.buddy.bundles.orchestrator.OrchestratorImpl$BuildException: java.io.IOException: Head build returned with code 1\n\tat org.pentaho.build.buddy.bundles.orchestrator.OrchestratorImpl.doOrchestrate(OrchestratorImpl.java:609)\n\tat org.pentaho.build.buddy.bundles.orchestrator.OrchestratorImpl.orchestrate(OrchestratorImpl.java:364)\n\t... 41 more\nCaused by: java.io.IOException: Head build returned with code 1\n\t... 43 more\n\n```"}}
{"actor":{"display_login":"wingman-pentaho"}}