Play 2.2.6 released

651 views
Skip to first unread message

Rich Dougherty

unread,
Nov 18, 2014, 8:14:32 PM11/18/14
to play-framework
Hi all

The Play team is pleased to announce the Play 2.2.6 maintenance release. This release fixes one security vulnerability and two bugs.

CVE-2014-3630 – XML External Entity exploit
3342 – HttpExecutionContext should call delegate's prepare
1938 – Invalid URI results to 500 Internal Server Error (should be 400)

You can get Play 2.2.6 from playframework.com/download or by changing the Play version in your project's project/plugins.sbt file.

Cheers
Rich

--
Rich Dougherty - @richdougherty
Engineer - Typesafe, Inc

Michael Slinn

unread,
Nov 19, 2014, 1:32:37 PM11/19/14
to play-fr...@googlegroups.com
Not sure what this is about. Play 2.2.5 worked fine:

$ bin/play update
Picked up _JAVA_OPTIONS:  -Dcom.amazonaws.sdk.disableCertChecking=true -XX:+UseCompressedOops -Xverify:none -Dconfig.file=/var/work/training/cadenza/conf/dev.conf -Dscala.repl.maxprintstring=9999
Listening for transport dt_socket at address: 9999
java.lang.UnsupportedOperationException: Position.start on class scala.reflect.internal.util.OffsetPosition
at scala.reflect.internal.util.Position.start(Position.scala:114)
at sbt.internals.parser.SbtParser.sbt$internals$parser$SbtParser$$convertStatement$1(SbtParser.scala:142)
at sbt.internals.parser.SbtParser$$anonfun$4.apply(SbtParser.scala:147)
at sbt.internals.parser.SbtParser$$anonfun$4.apply(SbtParser.scala:147)
at scala.collection.TraversableLike$$anonfun$flatMap$1.apply(TraversableLike.scala:251)
at scala.collection.TraversableLike$$anonfun$flatMap$1.apply(TraversableLike.scala:251)
at scala.collection.immutable.List.foreach(List.scala:318)
at scala.collection.TraversableLike$class.flatMap(TraversableLike.scala:251)
at scala.collection.AbstractTraversable.flatMap(Traversable.scala:105)
at sbt.internals.parser.SbtParser.splitExpressions(SbtParser.scala:147)
at sbt.internals.parser.SbtParser.<init>(SbtParser.scala:60)
at sbt.EvaluateConfigurations$.splitExpressions(EvaluateConfigurations.scala:227)
at sbt.EvaluateConfigurations$.parseConfiguration(EvaluateConfigurations.scala:69)
at sbt.EvaluateConfigurations$.evaluateSbtFile(EvaluateConfigurations.scala:107)
at sbt.Load$.sbt$Load$$loadSettingsFile$1(Load.scala:710)
at sbt.Load$$anonfun$sbt$Load$$memoLoadSettingsFile$1$1.apply(Load.scala:715)
at sbt.Load$$anonfun$sbt$Load$$memoLoadSettingsFile$1$1.apply(Load.scala:714)
at scala.Option.getOrElse(Option.scala:120)
at sbt.Load$.sbt$Load$$memoLoadSettingsFile$1(Load.scala:714)
at sbt.Load$$anonfun$loadFiles$1$2.apply(Load.scala:721)
at sbt.Load$$anonfun$loadFiles$1$2.apply(Load.scala:721)
at scala.collection.TraversableLike$$anonfun$map$1.apply(TraversableLike.scala:244)
at scala.collection.TraversableLike$$anonfun$map$1.apply(TraversableLike.scala:244)
at scala.collection.mutable.ResizableArray$class.foreach(ResizableArray.scala:59)
at scala.collection.mutable.ArrayBuffer.foreach(ArrayBuffer.scala:47)
at scala.collection.TraversableLike$class.map(TraversableLike.scala:244)
at scala.collection.AbstractTraversable.map(Traversable.scala:105)
at sbt.Load$.loadFiles$1(Load.scala:721)
at sbt.Load$.discoverProjects(Load.scala:732)
at sbt.Load$.discover$1(Load.scala:545)
at sbt.Load$.loadTransitive(Load.scala:574)
at sbt.Load$.loadProjects$1(Load.scala:442)
at sbt.Load$.loadUnit(Load.scala:446)
at sbt.Load$$anonfun$18$$anonfun$apply$11.apply(Load.scala:281)
at sbt.Load$$anonfun$18$$anonfun$apply$11.apply(Load.scala:281)
at sbt.BuildLoader$$anonfun$componentLoader$1$$anonfun$apply$4$$anonfun$apply$5$$anonfun$apply$6.apply(BuildLoader.scala:91)
at sbt.BuildLoader$$anonfun$componentLoader$1$$anonfun$apply$4$$anonfun$apply$5$$anonfun$apply$6.apply(BuildLoader.scala:90)
at sbt.BuildLoader.apply(BuildLoader.scala:140)
at sbt.Load$.loadAll(Load.scala:334)
at sbt.Load$.loadURI(Load.scala:289)
at sbt.Load$.load(Load.scala:285)
at sbt.Load$.load(Load.scala:276)
at sbt.Load$.apply(Load.scala:130)
at sbt.GlobalPlugin$.build(GlobalPlugin.scala:33)
at sbt.GlobalPlugin$.load(GlobalPlugin.scala:39)
at sbt.Load$.loadGlobal(Load.scala:88)
at sbt.Load$.defaultWithGlobal(Load.scala:63)
at sbt.Load$.defaultLoad(Load.scala:34)
at sbt.BuiltinCommands$.doLoadProject(Main.scala:481)
at sbt.BuiltinCommands$$anonfun$loadProjectImpl$2.apply(Main.scala:475)
at sbt.BuiltinCommands$$anonfun$loadProjectImpl$2.apply(Main.scala:475)
at sbt.Command$$anonfun$applyEffect$1$$anonfun$apply$2.apply(Command.scala:58)
at sbt.Command$$anonfun$applyEffect$1$$anonfun$apply$2.apply(Command.scala:58)
at sbt.Command$$anonfun$applyEffect$2$$anonfun$apply$3.apply(Command.scala:60)
at sbt.Command$$anonfun$applyEffect$2$$anonfun$apply$3.apply(Command.scala:60)
at sbt.Command$.process(Command.scala:92)
at sbt.MainLoop$$anonfun$1$$anonfun$apply$1.apply(MainLoop.scala:98)
at sbt.MainLoop$$anonfun$1$$anonfun$apply$1.apply(MainLoop.scala:98)
at sbt.State$$anon$1.process(State.scala:184)
at sbt.MainLoop$$anonfun$1.apply(MainLoop.scala:98)
at sbt.MainLoop$$anonfun$1.apply(MainLoop.scala:98)
at sbt.ErrorHandling$.wideConvert(ErrorHandling.scala:17)
at sbt.MainLoop$.next(MainLoop.scala:98)
at sbt.MainLoop$.run(MainLoop.scala:91)
at sbt.MainLoop$$anonfun$runWithNewLog$1.apply(MainLoop.scala:70)
at sbt.MainLoop$$anonfun$runWithNewLog$1.apply(MainLoop.scala:65)
at sbt.Using.apply(Using.scala:24)
at sbt.MainLoop$.runWithNewLog(MainLoop.scala:65)
at sbt.MainLoop$.runAndClearLast(MainLoop.scala:48)
at sbt.MainLoop$.runLoggedLoop(MainLoop.scala:32)
at sbt.MainLoop$.runLogged(MainLoop.scala:24)
at sbt.StandardMain$.runManaged(Main.scala:53)
at sbt.xMain.run(Main.scala:28)
at xsbt.boot.Launch$$anonfun$run$1.apply(Launch.scala:57)
at xsbt.boot.Launch$.withContextLoader(Launch.scala:77)
at xsbt.boot.Launch$.run(Launch.scala:57)
at xsbt.boot.Launch$$anonfun$explicit$1.apply(Launch.scala:45)
at xsbt.boot.Launch$.launch(Launch.scala:65)
at xsbt.boot.Launch$.apply(Launch.scala:16)
at xsbt.boot.Boot$.runImpl(Boot.scala:32)
at xsbt.boot.Boot$.main(Boot.scala:21)
at xsbt.boot.Boot.main(Boot.scala)
[error] java.lang.UnsupportedOperationException: Position.start on class scala.reflect.internal.util.OffsetPosition
[error] Use 'last' for the full log.
Project loading failed: (r)etry, (q)uit, (l)ast, or (i)gnore? 

Rich Dougherty

unread,
Nov 19, 2014, 7:05:26 PM11/19/14
to play-framework
Hmmm, I've got no idea either. Is anyone else seeing this?

Did you get this problem on a fresh Play 2.2.6 project or on a project you upgraded from Play 2.2.5? It looks a bit like an sbt issue. Is there anything unusual about your sbt setup?

--
You received this message because you are subscribed to the Google Groups "play-framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email to play-framewor...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Mike Slinn

unread,
Nov 19, 2014, 7:16:57 PM11/19/14
to play-fr...@googlegroups.com

> Did you get this problem on a fresh Play 2.2.6 project or on a project
> you upgraded from Play 2.2.5?

Upgrade from 2.2.5

> It looks a bit like an sbt issue. Is there anything unusual about your
> sbt setup?
Vanilla

Thanks,

Mike

Rich Dougherty

unread,
Nov 19, 2014, 7:28:26 PM11/19/14
to play-framework
Hi Mike

I've created an sbt ticket to track the issue. Would you mind adding the full stack trace to the ticket? I think you need to type (L)ast to get the full trace.


Cheers
Rich

--
You received this message because you are subscribed to the Google Groups "play-framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email to play-framework+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

Yann Simon

unread,
Nov 23, 2014, 10:09:34 AM11/23/14
to play-fr...@googlegroups.com

Try to delete the target directories before starting SBT:
rm -rf target/
rm -rf project/target

Maybe it will help.

Rich Dougherty

unread,
Nov 23, 2014, 3:57:26 PM11/23/14
to play-framework
The problem Mike was seeing was caused a mismatch between the SBT version and Scala version in his environment.

Vanilla Play 2.2 ships with Scala 2.10.3 and SBT 0.13.0 which will work OK. If you upgrade to SBT 0.13.7 then you also need to change the Play project version to Scala 2.10.4. More commentary: https://github.com/sbt/sbt/issues/1739#issuecomment-63909370

We'll consider bumping Play's default Scala version in a future release of 2.2.x, although we're pretty conservative about changing things for older versions of Play.

Cheers
Rich

--
You received this message because you are subscribed to the Google Groups "play-framework" group.
To unsubscribe from this group and stop receiving emails from it, send an email to play-framewor...@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

Yann Simon

unread,
Nov 23, 2014, 4:00:43 PM11/23/14
to play-framework
Thx for the info Rich, good to know.
Reply all
Reply to author
Forward
0 new messages