Changelog for
nexus-2.15.1.02-1.1.x86_64.rpm :
* Thu Mar 24 2022 Julio Gonzalez Gil
- 2.15.1-02-1- Update to 2.15.1-02- Bugfixes:
* Correct a regression introduce in 2.15.0 that prevented writing the request log
* Fri Mar 18 2022 Julio Gonzalez Gil - 2.15.0-04-1- Update to 2.15.0-04- Bugfixes:
* Resolved npm Memory Issue: You must set the property for nexus.npm.abbreviateMetadata to \"True\" in $NEXUS_HOME/conf/nexus.properties to enable the fix. Enabling this property may affect what the CLI shows, but it will improve performance when dealing with large metadata.
* Fixed Performance Issue- Features:
* Upgraded to Jetty 9.4 from Jetty 8: Adminstrators who have customized their Jetty configuration will need to make changes before they can upgrade to this release. See the knowledge base for mroe information: https://support.sonatype.com/hc/en-us/articles/4417117321619-Eclipse-Jetty-Changes-in-Repository-2-15-0
* Add Ext JS Licensing Declaration to Nexus Repository 2
* Upgraded Goodies Library (prevents potential security vulnerability CVE-2020-15870)
* Sat Dec 18 2021 Julio Gonzalez Gil - 2.14.21-02-1- Update to 2.14.21-02- Bugfixes:
* logback library update to fix a low/moderate vulnerability, as a precautionary measure. No known exploit of Nexus Repository via logback at this time.
* Tue Jan 05 2021 Julio Gonzalez Gil - 2.14.20-02-1- Update to 2.14.20-02- Bugfixes:
* NEXUS-26224: CVE-2020-13920: Apache ActiveMQ JMX is vulnerable to a MITM attack
* NEXUS-25956: Signatures with ECC algorithm not being recognized
* Fri Oct 02 2020 Julio Gonzalez Gil - 2.14.19.01-1- Update to 2.14.19-01- Bugfixes:
* Minor security fixes.
* Fri Oct 02 2020 Julio Gonzalez Gil - 2.14.18.01-1- Update to 2.14.18-01- Bugfixes:
* NEXUS-21802: Maven metadata sha256/sha512 checksum in staging repositories
* Fri Apr 17 2020 Julio Gonzalez Gil - 2.14.17.01-1- Update to 2.14.17-01- Bugfixes:
* NEXUS-23556: CVE-2020-11415: LDAP system credentials can be exposed by admin user
* Fri Feb 28 2020 Julio Gonzalez Gil - 2.14.16.01-2- Clean up spec and fix to build all distributions at OpenBuildService- Enable building and installation for Amazon Linux >= 2- Enable building and installation for for openSUSE Tumbleweed/Factory
* Mon Jan 27 2020 Julio Gonzalez Gil - 2.14.16.01-1- License for Nexus OSS is EPL-2.0 as stated at https://blog.sonatype.com/2012/06/nexus-oss-switched-to-the-eclipse-public-license-a-clarification-and-an-observation/ and it is since 2012. Mistake inherited from the original packages from Jens Braeuer.- Update to 2.14.16-01- Bugfixes:
* NEXUS-22014: CVE-2019-15893: Remote Code Execution vulnerability
* NEXUS-22453: Update Apache Shiro library to resolve security vulnerability
* NEXUS-22313: Invalid content-range header returned
* NEXUS-13306: usernames containing non URL safe characters cannot authenticate using the Crowd realm
* Thu Oct 17 2019 Julio Gonzalez Gil - 2.14.15.01-1- Update to 2.14.15-01- Bugfixes:
* NEXUS-21044: CVE-2019-15893: Remote Code Execution vulnerability
* NEXUS-21193: CVE-2019-16530: Remote Code Execution vulnerability
* NEXUS-20626: CVE-2019-5475: OS Command Injection vulnerability (second part to the fix in 2.14.14)
* NEXUS-21512: Update Apache Tika and Commons Compress libraries to resolve security vulnerabilities
* Fri Aug 16 2019 Julio Gonzalez Gil - 2.14.14.01-1- Update to 2.14.14-01
* Fri Apr 26 2019 Julio Gonzalez Gil - 2.14.13.01-1- Update to 2.14.13-01
* Tue Mar 12 2019 Julio Gonzalez Gil - 2.14.12.02-1- Update to 2.14.12-02
* Sat Jan 26 2019 Julio Gonzalez - 2.14.11.01-2- Do not replace modified config files
* Fri Nov 23 2018 Julio Gonzalez - 2.14.11.01-1- Update to 2.14.11-01- Require Java 1.8.0
* Fri Nov 23 2018 Julio Gonzalez - 2.14.10.01-1- Update to 2.14.10-01
* Fri Nov 23 2018 Julio Gonzalez - 2.14.9.01-1- Update to 2.14.9-01
* Sat Mar 10 2018 Julio Gonzalez - 2.14.8.01-1- Update to 2.14.8-01
* Sat Mar 10 2018 Julio Gonzalez - 2.14.7.01-1- Update to 2.14.7-01- Compatibility with Java 1.7.0 is restored
* Sat Mar 10 2018 Julio Gonzalez - 2.14.6.02-1- Update to 2.14.6-02
* Sat Dec 30 2017 Anton Patsev - 2.14.5.02-2- Stop requiring sysvinit compatibility for systemd- Add systemd service
* Thu Dec 28 2017 Julio Gonzalez - 2.14.5.02-1- Start using Fedora/RHEL release conventions- Fix problems on RPM removals- Require Java 1.8.0- Fix source- Make the package compatible with SUSE and openSUSE
* Thu Aug 03 2017 Julio Gonzalez - 2.14.5-02- Update to 2.14.5-02
* Sat May 20 2017 Julio Gonzalez - 2.14.4-03- Update to 2.14.4-03
* Sat May 20 2017 Julio Gonzalez - 2.14.3-02- Update to 2.14.3-02
* Sat May 20 2017 Julio Gonzalez - 2.14.2-01- Update to 2.14.2-01
* Sat Nov 12 2016 Julio Gonzalez - 2.14.1-01- Update to 2.14.1-01
* Sun May 29 2016 Julio Gonzalez - 2.13.0-01- Update to 2.13.0-01
* Sat Feb 13 2016 Julio Gonzalez - 2.12.0-01- Update to 2.12.0-01
* Tue Jul 21 2015 Julio Gonzalez - 2.11.4-01- Update to 2.11.4-01
* Fri Jun 26 2015 Julio Gonzalez - 2.11.3-01- Update to last version available- Nexus will now listen at 8081 (this can be modified at /etc/nexus/nexus.properties)- Nexus runs now without as system user, not as root- Remove jdk dependency (no virtual package at CentOS 7)
