[no main manifest attribute]

[maven]
- 원인은 Main Class 위치를 찾지 못해서 발생하는 것 입니다.
- pom.xml 파일에 플러그인(plugin)을 추가 하고 그 안에 있는 "mainClass" 태그에 "[package name].[class name]" 을 추가하면 됩니다.

<build>
  <plugins>
    <plugin>
      <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-maven-plugin</artifactId>
          <configuration>
            <excludes>
              <exclude>
                <groupId>org.projectlombok</groupId>
                <artifactId>lombok</artifactId>
            </exclude>
          </excludes>
        </configuration>
      </plugin>
    </plugins>
</build>



[gradle]

jar {
    manifest {
        attributes 'Main-Class': 'com.package.application.MainClass'
    }
}



[필요한 의존성 모두 추가 - gradle 사용시]

- 프로젝트에 필요한 모든 의존성이 같이 추가된것으로 MANIFEST.MF까지 모두 정상적인 형태로 나온다.

jar {
    enabled = false
}

 

Settings > Editor > General > Code Folding
==> One-line methods 체크 해제 후 Apply

<artifactId>spring-boot-maven-plugin</artifactId>

spring-boot-maven-plugin not found 가 표시되는 경우에 spring-boot 의 version 을 추가한다.

<parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.6.6</version>
        <relativePath/> <!-- lookup parent from repository -->
</parent>

https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement

 

Spring Framework RCE, Early Announcement

<p><strong>Updates</strong> </p> <ul> <li><strong>[04-01 16:35 BST]</strong> Updated <a href="#am-i-impacted">Am I Impacted</a> with additional notes</li> <li><strong>[04-01 13:05 BST]</strong> Updated <a href="#suggested-workarounds">Suggested Workarounds

spring.io

 

 

Spring Framework RCE, Early Announcement

 

 

MARCH 31, 2022

 

Updates

  • [04-01 16:35 BST] Updated Am I Impacted with additional notes
  • [04-01 13:05 BST] Updated Suggested Workarounds section for Apache Tomcat upgrades and Java 8 downgrades
  • [04-01 12:51 BST] Apache Tomcat releases versions 10.0.20, 9.0.62, and 8.5.78 which close the attack vector on Tomcat’s side, see mitigation alternative
  • [03-31 15:40 BST] Spring Boot 2.6.6 is available
  • [03-31 14:38 BST] Spring Boot 2.5.12 is available
  • [03-31 14:00 BST] CVE-2022-22965 is published
  • [03-31 13:03 BST] Added section “Misconceptions”
  • [03-31 12:34 BST] Added section “Am I Impacted”
  • [03-31 12:11 BST] Fix minor issue in the workaround for adding disallowedFields
  • [03-31 11:59 BST] Spring Framework versions 5.3.18 and 5.2.20, which address the vulnerability, are now available. The release process for Spring Boot is in progress

 

--------------------------------------

KISA 공지

https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=66592&queryString=cGFnZT0xJnNvcnRfY29kZT0mc29ydF9jb2RlX25hbWU9JnNlYXJjaF9zb3J0PXRpdGxlX25hbWUmc2VhcmNoX3dvcmQ9c3ByaW5n

$>set

+ Recent posts