dev-java/snakeyaml: bump to 1.28 (CVE-2017-18640)

Closes: https://bugs.gentoo.org/776796
Package-Manager: Portage-3.0.17, Repoman-3.0.2
Signed-off-by: Volkmar W. Pogatzki <gentoo@pogatzki.net>
Closes: https://github.com/gentoo/gentoo/pull/20176
Signed-off-by: Miroslav Šulc <fordfrog@gentoo.org>

2 files changed, 87 insertions, 0 deletions

diff --git a/dev-java/snakeyaml/Manifest b/dev-java/snakeyaml/Manifest
index bf4e3ba8cc26..585b73ed3681 100644
--- a/dev-java/snakeyaml/Manifest
+++ b/dev-java/snakeyaml/Manifest
@@ -1 +1,2 @@
+DIST asomov-snakeyaml-b28f0b4d87c6.tar.gz 397832 BLAKE2B 054c228cd739e0d7ae89227cba7ae1aba76e5b6a7aae4915a765816d916ab3a47e80d6c2795a5e9bcaee96a70c1751fb9e67523e7faed2db5a6d2123d773d04a SHA512 2d19aee8c3aef2c4c300382451c1241dd2452180fe28c39eb9fe1bbc9d6c615bb8504535d3cf1cf5fe2ad55def8c43b709e8ecd97f760403cfaee7db977f074c
 DIST snakeyaml-1.16.tar.bz2 234954 BLAKE2B dea06c3501ceab4e92b4d125dc882ce7b7773d67ac5526fdf39fafb421f339fe892cfd3f8e80e413aa080fecbc94425842ccabd099d97e1c705eab7025c489e9 SHA512 77ef0b1fa2ebe7ab1618745c407436ac6965159e29e1271b0d571006b967bcd94658eb3a8047180ea7c3160eb66ecbac1f24414537a24a81c11fb735ce65e3a4
diff --git a/dev-java/snakeyaml/snakeyaml-1.28.ebuild b/dev-java/snakeyaml/snakeyaml-1.28.ebuild
new file mode 100644
index 000000000000..33fed45f0219
--- /dev/null
+++ b/dev-java/snakeyaml/snakeyaml-1.28.ebuild
@@ -0,0 +1,86 @@
+# Copyright 1999-2021 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Skeleton command:
+# java-ebuilder --generate-ebuild --workdir . --pom pom.xml --download-uri https://bitbucket.org/asomov/snakeyaml/get/snakeyaml-1.28.tar.gz --slot 0 --keywords "~amd64 ~x86" --ebuild snakeyaml-1.28-r1.ebuild
+
+EAPI=7
+
+JAVA_PKG_IUSE="doc source test"
+MAVEN_ID="org.yaml:snakeyaml:1.28"
+JAVA_TESTING_FRAMEWORKS="junit-4"
+
+inherit java-pkg-2 java-pkg-simple
+
+MY_COMMIT="b28f0b4d87c6"
+MY_P="asomov-snakeyaml-${MY_COMMIT}"
+
+DESCRIPTION="YAML 1.1 parser and emitter for Java"
+HOMEPAGE="https://bitbucket.org/asomov/snakeyaml"
+SRC_URI="https://bitbucket.org/asomov/${PN}/get/${P}.tar.gz -> ${MY_P}.tar.gz"
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="~amd64 ~x86"
+
+# Compile dependencies
+# POM: pom.xml
+# test? commons-io:commons-io:2.5 -> >=dev-java/commons-io-2.4:1
+# test? joda-time:joda-time:2.10.1 -> >=dev-java/joda-time-2.10.10:0
+# test? junit:junit:4.13.1 -> >=dev-java/junit-4.13.1:4
+# test? org.apache.commons:commons-lang3:3.4 -> >=dev-java/commons-lang-3.4:3.4
+# test? org.apache.velocity:velocity:1.6.2 -> >=dev-java/velocity-1.7:0
+
+DEPEND="
+	>=virtual/jdk-1.8:*
+	test? (
+		>=dev-java/commons-io-2.4:1
+		>=dev-java/commons-lang-3.4:3.4
+		>=dev-java/joda-time-2.10.10:0
+		>=dev-java/velocity-1.7:0
+	)
+"
+
+RDEPEND="
+	>=virtual/jre-1.8:*
+"
+
+S="${WORKDIR}/${MY_P}"
+
+JAVA_SRC_DIR="src/main/java"
+
+JAVA_TEST_GENTOO_CLASSPATH="commons-io-1,joda-time,junit-4,commons-lang-3.4,velocity"
+JAVA_TEST_SRC_DIR="src/test/java"
+JAVA_TEST_RESOURCE_DIRS="src/test/resources"
+
+JAVA_TEST_EXCLUDES=(
+	"examples.spring.TestEntityDescription"	# Invalid test class
+	"org.yaml.snakeyaml.constructor.TestBean1"	# Invalid test class
+	"org.yaml.snakeyaml.introspector.TestAnnotation"	# Invalid test class
+	"org.yaml.snakeyaml.introspector.TestBean"	# Invalid test class
+	"org.yaml.snakeyaml.ruby.TestObject"	# Invalid test class
+	"org.yaml.snakeyaml.issues.issue154.TestBean"	# Invalid test class
+	"org.yaml.snakeyaml.issues.issue193.TestYaml"	# Invalid test class
+
+	# initializationError(org.yaml.snakeyaml.constructor.TestBean)
+	# java.lang.IllegalArgumentException: Test class can only have one constructor
+	"org.yaml.snakeyaml.constructor.TestBean"
+
+	# testTemplate1(org.yaml.snakeyaml.emitter.template.VelocityTest)
+	# java.lang.NullPointerException
+	"org.yaml.snakeyaml.emitter.template.VelocityTest"
+
+	# yamlClassInYAMLCL(org.yaml.snakeyaml.issues.issue318.ContextClassLoaderTest)
+	# java.lang.ClassNotFoundException: org.yaml.snakeyaml.Yaml
+	"org.yaml.snakeyaml.issues.issue318.ContextClassLoaderTest"
+
+	"examples.spring.TestEntity"	# Invalid test class
+
+	"org.pyyaml.PyImportTest"	# No tests found in org.pyyaml.PyImportTest
+)
+
+src_test() {
+	export EnvironmentKey1="EnvironmentValue1"
+	export EnvironmentEmpty=""
+	java-pkg-simple_src_test
+}