On 06/28/2016 08:42 PM, Eyal Edri wrote:
Hi,
Using the latest tool we deployed to finding various issues in oVirt,. I
found one of the reports were on multiple occurances of the same library
but using different versions, can someone verify if this is true and if
we need to align all to use the same version?
Most probably this isn't true. The tool is probably analysing the
dependencies using the Maven POM files for that. As a result it will
find that we require different versions of things because of the
transitive dependencies. But during runtime we use JBoss modules as our
class loading mechanism, and that strictly controls what libraries are
used, and we don't currently have two versions of the same module in any
case. Note however, that JBoss modules supports having multiple versions
of the same module, and doing that is justified and needed in some
cases, but we don't do it currently.
I checked the below libraries specifically, and I believe that there is
no duplication in our case.
LibraryTypeDescription
commons-logging-1.1.1.jar
Multiple Library Versions
Version 1.2 is being used in project engine-server-ear
xml-apis-1.0.b2.jar
Multiple Library Versions
Version 1.3.04 is being used in project restapi-jaxrs
commons-logging-1.0.4.jar
Multiple Library Versions
Version 1.2 is being used in project engine-server-ear
commons-beanutils-1.7.0.jar
Multiple Library Versions
Version 1.8.2 is being used in project interface-common-jaxrs
commons-beanutils-core-1.8.0.jar
Multiple Library Versions
Version 1.8.3 is being used in project ovirt-checkstyle-extension
jboss-logging-3.1.1.GA.jar
Multiple Library Versions
Version 3.1.4.GA <
http://3.1.4.GA> is being used in project
interface-common-jaxrs
jackson-jaxrs-1.9.4.jar
Multiple Library Versions
Version 1.9.9 is being used in project restapi-jaxrs
jboss-logging-3.1.2.GA.jar
Multiple Library Versions
Version 3.1.4.GA <
http://3.1.4.GA> is being used in project
interface-common-jaxrs
jaxrs-api-2.1.0.GA.jar
Multiple Library Versions
Version 2.3.2.Final is being used in project engine-server-ear
--
Eyal Edri
Associate Manager
RHEV DevOps
EMEA ENG Virtualization R&D
Red Hat Israel
phone: +972-9-7692018
irc: eedri (on #tlv #rhev-dev #rhev-integ)
--
Dirección Comercial: C/Jose Bardasano Baos, 9, Edif. Gorbea 3, planta
3ºD, 28016 Madrid, Spain
Inscrita en el Reg. Mercantil de Madrid – C.I.F. B82657941 - Red Hat S.L.