openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

File ant.changes of Package ant-antlr (Revision 90a53e9a98dc33ff1d972fa32418de19)

Currently displaying revision 90a53e9a98dc33ff1d972fa32418de19 , Show latest

-------------------------------------------------------------------
Mon Mar 28 10:01:43 UTC 2022 - David Anes <david.anes@suse.com>

- Security fixes: 
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when 
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when 
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch

-------------------------------------------------------------------
Wed May  6 16:49:40 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>

- Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]

-------------------------------------------------------------------
Wed May  6 16:45:22 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>

- Remove jakarta-commons-logging dependencies [bsc#1133997]
- Use apache-commons-logging in optional tasks

-------------------------------------------------------------------
Thu Aug 16 19:37:00 UTC 2018 - jsikes@suse.de

- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886

-------------------------------------------------------------------
Sat Jun 28 19:45:04 UTC 2014 - smoioli@suse.com

- Update to 1.9.4
- Bug fixes:

* <import>/<include> failed when the importing file was loaded from an
   URI or a jar and it imported a file from the local file system via
   an absolute path.
   Bugzilla Report 50953

* <import> could import the same resource twice when imported via
   different resource types.
   Bugzilla Report 55097

* several calls to File#mkdirs could fall victim to a race condition
   where another thread already created the same directory.
   Bugzilla Report 55290

* <manifestclasspath> created '/' rather than './' for the parent
   directory of the given jarfile.
   Bugzilla Report 55049

* <concat>'s fixlastline="true" didn't work when using certain filter
   readers.
   Bugzilla Report 54672

* several places where resources are read from jars will now
   explicitly disable caching to avoid problems with reloading jars.
   Bugzilla Report 54473

* AntClassloader will now ignore files that are part of the classpath
   but not zip files when scanning for resources.  It used to throw an
   exception.
   Bugzilla Report 53964

* <javadoc> caused a NullPointerException when no destdir was set.
   Bugzilla Report 55949

* <jar filesetmanifest="mergewithoutmain"> would still include the
   Main section of the fileset manifests if there was no nested
   manifest or manifest attribute.
   Bugzilla Report 54171

* reading of compiler args has become more defensive
   Bugzilla Report 53754

* <copy> without force="true" would not only fail to overwrite a
   read-only file as expected but also remove the existing file.
   Bugzilla Report 53095

* <delete removeNotFollowedSymlinks="true"> would remove symbolic
   links to not-included files.  It will still delete symlinks to
   directories that would have been followed even if they are not
   explicitly included.  exclude-Patterns can still be used to
   preserve symbolic links.
   Bugzilla Report 53959

* Sometimes copy-operations using NIO FileChannels fail.  Ant will
   now try to use a Stream based copy operation as fallback when the
   Channel based copy fails.
   Bugzilla Reports 53102 and 54397

* Javadoc.postProcessGeneratedJavadocs() fails for Classes that
   extend Javadoc
   Bugzilla Report 56047

* TarInputStream will now read archives created by tar
   implementations that encode big numbers by not adding a trailing
   NUL.

* the isExists() method of URLResource returned false positives for
   HTTP and FTP URLs.

-------------------------------------------------------------------
Thu Apr 24 09:54:12 UTC 2014 - dmueller@suse.com

- remove dependency on gpg-offline (blocks rebuilds and
  tarball integrity is checked by source-validator anyway, plus
  it was commented out)

-------------------------------------------------------------------
Thu Jan  2 08:36:18 UTC 2014 - mvyskocil@suse.com

- Update to 1.9.3
- BugFixes:
  * Ant 1.8 exec task changes have slowed exec to a crawl, apache#54128
  * <parallel> swallowed the status code of nested <fail> tasks,
   apache#55539
  * a race condition could make <fixcrlf> tasks of parallel builds to
    interfere with each other, apache#54393
 * <mail>'s mailport still didn't work properly when using smtps,
   apache#49267
 * using attributes belonging to the if and unless namespaces
   made macrodef fail, apache#55885.
 * Apt is not available under JDK 1.8, apache#55922
- drop unused macros
- add gpg verification

-------------------------------------------------------------------
Wed Dec  4 14:58:13 UTC 2013 - mvyskocil@suse.com

- use requires_eq instead of manual call of rpm -q

-------------------------------------------------------------------
Wed Oct  2 09:52:33 UTC 2013 - mvyskocil@suse.com

- install compat symlink to /usr/share/ant/bin/antRun to make scala build

-------------------------------------------------------------------
Mon Sep  9 11:05:25 UTC 2013 - tchvatal@suse.com

- Move from jpackage-utils to javapackage-tools

-------------------------------------------------------------------
Thu Aug 22 07:47:26 UTC 2013 - mvyskocil@suse.com

- Update to 1.9.2
- Incompatible changes:
 * ProjectHelper's implementation import and include tasks
   defaults the targetPrefix to ProjectHelper.USE_PROJECT_NAME_AS_TARGET_PREFIX.
   ProjectHelper2 is not affected, apache#54940.
 * FixCRLF used to treat the EOL value ASIS to convert to the system property
   line.separator. Specified was that ASIS would leave the EOL characters alone,
   the task now really leaves the EOL characters alone. This also implies that
   EOL ASIS will not insert a newline even if fixlast is set to true.
   apache#53036
 * The CommandLauncher hierarchy that used to be a set of inner
   classes of Execute has been extracted to the
   org.apache.tools.ant.taskdefs.launcher package.
 * Any FileResource whose represented File has a parent also has a basedir.
 * Removing the Perforce Ant tasks replaced by tasks supplied by Perforce Inc.
 * Setting the default encoding of StringResource to UTF-8 instead of null
- Bugfixes:
 * <javadoc> post-process generated docs to migitiate frame
    injection attack (CVE-2013-1571) apache#55132
 * Parsing of zip64 extra fields has become more lenient
 * TarInputStream should now properly read GNU longlink entries' names.
   apache#55040.
 * <java> and <exec> used to be too restrictive when evaluating
   whether a given set of options is compatible with spawning the new
   process, apache#55112.
 * Corrected XSLTC error in <junitreport>, apache#54641.
 * and many more, see WHATSNEW for details

-------------------------------------------------------------------
Mon Jan  7 12:15:09 UTC 2013 - mvyskocil@suse.com

- remove xerces-j2-bootstrap depenency (bnc#789163)

-------------------------------------------------------------------
Wed May 30 11:46:44 UTC 2012 - cfarrell@suse.com

- license update: CDDL-1.0
  SPDX format (note that it should CDDL-1.1 if the (c) owner and license
  steward is Oracle)

-------------------------------------------------------------------
Tue May 15 07:02:23 UTC 2012 - mvyskocil@suse.cz

- build ignore java-1_7_0-openjdk as well

-------------------------------------------------------------------
Wed Feb  1 12:54:47 UTC 2012 - mvyskocil@suse.cz

- revert the Recommends to fix a lot of build fails

-------------------------------------------------------------------
Wed Jan 25 09:54:17 UTC 2012 - mvyskocil@suse.cz

- use new _mavendepmapfragdir macro instead of hardocded path
- change java-devel Requires to Recommends

-------------------------------------------------------------------
Tue Jan  3 01:01:19 CET 2012 - dmueller@suse.de

- use dist-lite and dist_javadocs to make javadoc build really
  optional
- fix arm check (ifarch does not work in a noarch spec file)

-------------------------------------------------------------------
Thu Dec 15 08:49:28 UTC 2011 - mvyskocil@suse.cz

- use dist and javadocs targets to make javadoc build really configurable
- disable javadoc build on arm to speedup the build of java platform

-------------------------------------------------------------------
Sat Sep 17 11:04:48 UTC 2011 - jengelh@medozas.de

- Remove redundant tags/sections from specfile

-------------------------------------------------------------------
Mon Mar 14 13:02:38 UTC 2011 - mvyskocil@suse.cz

- ignore openjdk for build of core ant

-------------------------------------------------------------------
Wed Mar  9 08:56:33 UTC 2011 - mvyskocil@suse.cz

- Update to ant 1.8.2 
  * performance improvements in directory scanning
  * XSLT task honors classpath again (bugrep 49271)
  * distinction between core tasks and optional tasks is abolished
  * new task augment allows to add attributes or nested elements to previously
    defined references
  * Lexically scoped local properties, i.e. properties that are only defined
    inside a target, sequential block or similar environment. This is very
    useful inside of <macrodef>s where a macro can now define a temporary
    property that will disappear once the task has finished.
  * <import> can now import from any file- or URL-providing resource - this
    includes <javaresource>. This means <import> can read build file snippets
    from JARs or fixed server URLs. There are several other improvements in the
    area of import.
  * Various improvements to the directory scanning code that help with symbolic
    link cycles (as can be found on MacOS X Java installations for example) and
    improve scanning performance. For big directory trees the improvement is
    dramatic.
  * The way developers can extend Ant's property expansion algorithm has been
    rewritten (breaking the older API) to be easier to use and be more
    powerful. The whole local properties mechanism is implemented using that
    API and could be implemented in a separate library without changes in Ant's
    core. Things like the yet-to-be-released props Antlib can now provide often
    required "scripty" fuctions without touching Ant itself. At the same time
    the if and unless attributes have been rewritten to do the expected thing
    if applied to a property expansion (i.e. if="${foo}" will mean "yes, do it"
    if ${foo} expands to true, in Ant 1.7.1 it would mean "no" unless a
    property named "true" existed). This adds "testing conditions" as a new
    use-case to property expansion.
  * A new top-level element <extension-point> assists in writing re-usable
    build files that are meant to be imported. <extension-point> has a name and
    a dependency-list like <target> and can be used like a <target> from the
    command line or a dependency-list but the importing build file can add
    targets to the <extension-point>'s depends list.
  * Ant now requires Java 1.4 or later new task include provides an alternative
   to <import> that should be preferred when you don't want to override any
   targets
  * numerous bug fixes and improvements as documented in
    Bugzilla and in WHATSNEW
- merge the nodeps and trax packages to main one
- build ant-antlr.spec using openjdk
- add ant-apache-xalan2 and ant-testutil
- remove all pom files, as they are included and build from source tarball

-------------------------------------------------------------------
Fri Apr  9 10:41:42 UTC 2010 - mvyskocil@suse.cz

- fix bnc#595144 - Compiled binary in ant
  remove test.exe from source tarball

-------------------------------------------------------------------
Thu Mar 18 15:58:41 UTC 2010 - mvyskocil@suse.cz

- fix the compat symlinks

-------------------------------------------------------------------
Wed Mar 17 15:05:43 UTC 2010 - mvyskocil@suse.cz

- return back the /usr/share/ant/lib compat symlinks
  http://lists.opensuse.org/opensuse-java/2010-03/msg00007.html

-------------------------------------------------------------------
Wed Jun 17 10:22:10 CEST 2009 - mvyskocil@suse.cz

- do not use Release number in Requires of subpackages

-------------------------------------------------------------------
Sun May  3 11:37:14 CEST 2009 - ro@suse.de

- do not assume release number for ant and ant-antlr are identical

-------------------------------------------------------------------
Tue Apr 28 15:03:07 CEST 2009 - mvyskocil@suse.cz

- update to 1.7.1. Upstream changes (full list is in WHATSNEW):
  * String resources only have properties single expanded. If you relied on
  <string> resources being expanded more than once, it no longer happens.
  Bugzilla report 42277.

* A String resource's encoding attribute was only taken into account when
  set from the resource's OutputStream; the InputStream provided the String's
  binary content according to the platform's default encoding. Behavior has
  been modified to encode outgoing (InputStream) content as well as encoding
  incoming (OutputStream) content.

* <java> with fork now returns gives -1 instead of 0 as result when
  * failonerror
  is false and some exception (including timeout) occurs. Br 42377.

* ant-type attribute has been marked as deprecated and a warning has been
  issued if it is encountered in the build file.
  
  * FileUtils.createTempFile now actually creates the file.
  The TempFile task still does not create the file by default, can be
  instructed to do so however using a new parameter.  Bugzilla report 33969.

- added maven pom files from jpackage project
- synchronized ant.spec with jpackage.org 5.0
- used ant-antlr-prepare.sh for generate of ant-antlr.spec from ant.spec to
  keep them synchronized. Build is branched using value of %%bootstrap macro:
  * bootstrap == 1 means build ant, ant-{jmf,nodeps,scripts,swing,trax}
  * bootstrap == 0 means build rest of ant modules + ant-javadoc

-------------------------------------------------------------------
Mon Nov  3 11:45:06 CET 2008 - mvyskocil@suse.cz

- [bnc#440645] - ant fails without installed jdk:
  - added a java-devel to Recommends:

-------------------------------------------------------------------
Mon Jul 21 16:29:31 CEST 2008 - ro@suse.de

- use xerces-j2-bootstrap to build (as early as possible)
- add java doc dir to filelist of javadoc subpackage to fix build

-------------------------------------------------------------------
Wed Jul 16 14:11:41 CEST 2008 - coolo@suse.de

- avoid another build cycle

-------------------------------------------------------------------
Wed May  7 10:45:27 CEST 2008 - mvyskocil@suse.cz

- build using gcj, to allow a openjdk6 bootstrap
- change a source and a target level to 1.5 in build.xml

-------------------------------------------------------------------
Tue Aug 14 13:52:03 CEST 2007 - skh@suse.de

- disable junit tests and remove junit from BuildRequires to break
  circular build dependency

-------------------------------------------------------------------
Fri Jul  6 19:24:52 CEST 2007 - dbornkessel@suse.de

- update to version 1.7.0

major changes are (for a complete list, consult /usr/share/doc/packages/ant/WHATSNEW):

Changes that could break older environments:
 -------------------------------------------
 
 * Initial support for JDK 6 (JSR 223) scripting.
   <*script*> tasks will now use javax.scripting if BSF is
   not available, or if explicitly requested by using
   a "manager" attribute.
 
 * The -noproxy option which was in the previous 1.7 alpha and beta
   releases has been removed. It is the default behavior and not needed.
 
 * Removed launcher classes from nodeps jar.
 
 * <classconstants> filter reader uses ISO-8859-1 encoding to read
   the java class file. Bugzilla report 33604.
 
 * Defer reference process. Bugzilla 36955, 34458, 37688.
   This may break build files in which a reference was set in a target which was
   never executed. Historically, Ant would set the reference early on, during parse
   time, so the datatype would be defined. Now it requires the reference to have
   been in a bit of the build file which was actually executed. If you get
   an error about an undefined reference, locate the reference and move it somewhere
   where it is used, or fix the depends attribute of the target in question to
   depend on the target which defines the reference/datatype.
 
 * <script> and <scriptdef> now set the current thread context.
 
 * Unrestrict the dbvendor names in the websphere element of the ejbjar task.
   Bugzilla Report 40475.
 
 * <env> nested element in <java>, <exec> and others is now case-insensitive
   for windows OS. Bugzilla Report 28874.
 
 * Removed support for xalan1 completely. Users of Xalan1 for Ant builds will
   have to stay at ant 1.6.5 or upgrade to xalan2.
 
 * Use org.apache.log4j.Logger instead of org.apache.log4j.Category.
   Category has been deprecated for ~2 years and has been removed from
   the log4j code.  Logger was introduced in log4j 1.2 so users of
   log4j 1.1 and log4j 1.0 need to upgrade to a newer version of log4j.
   Bugzilla Report 31951.
 
 * build.sysclasspath now also affects the bootclasspath handling of
   spawned Java VMs.  If you set build.sysclasspath to anything other
   than "ignore" (or leave it unset, since "ignore" is the default when
   it comes to bootclasspath handling), then the bootclasspath of the
   VM running Ant will be added to the bootclasspath you've specified.
 
 * The <java fork="false"> now as per default installs a security manager
   using the default permissions. This is now independent of the
   failonerror attribute.  Bugzilla report 33361.
 
 * <signjar> now notices when the jar and signedjar are equal, and switches
   to the same dependency logic as when signedjar is omitted. This may break
   something that depended upon signing in this situation. However, since
   invoking the JDK jarsigner program with -signedjar set to the source jar
   actually crashes the JVM on our (Java1.5) systems, we don't think any
   build files which actually worked will be affected by the change.
 
 * <signjar> used to ignore a nested fileset when a jar was also provided as an
   attribute, printing a warning message; now it signs files in the fileset.
 
 * An improved method of handling timestamp granularity differences between
   client and server was added to the <ftp> task.  FTP servers typically
   have HH:mm timestamps whereas local filesystems have HH:mm:ss timestamps.
   Previously, this required tweaking with the timediffmillis attribute
   which also was used to handle timezone differences.  Now, there is a new
   timestampgranularity attribute.  The default value for get operations is 0
   since the user has the more powerful preservelastmodified attribute to work
   with.  Since this is not available on put operations the default value
   adds a minute to the server timestamp in order to account for this,
   Scripts which previously used timediffmillis to do this compensation may
   need to be rewritten.  timediffmillis has now been deprecated.
 
 * On Java1.5+, Ant automatically sets the system property
   java.net.useSystemProxies to true, which gives it automatic use of the local
   IE (Windows) or Gnome2 (Unix/Linux) proxy settings. This may break any build
   file that somehow relied on content outside the firewall being unreachable:
   use the -noproxy command-line option to disable this new feature.
   Note that the Java1.5 proxy configuration system still does not
   appear to work reliably on Windows or Linux.
 
 * Support for the XSL:P XML parser has been removed.
   Bugzilla Report 23455.
 
 * Visual Age for Java optional tasks removed.
 
 * Testlet (test) optional task removed.
 
 * Icontract optional task removed.
 
 * Metamata (maudit, mmetrics, and mparse tasks) removed.
 
 * Sitraka (jpcoverage, jpcovmerge, jpcovreport) tasks suppressed.
 
 * <fixcrlf> used \r (Mac) line endings on OS X, whose proper line separator
   is \n (Unix).  Bugzilla report 39585.
 
 * <scp> now optionally supports the sftp protocol, you may need a
   newer jsch.jar.  Bugzilla Report 39373.
 
 * Ant launcher program prints errors to stderr, and exits with a 2 exit code
   value if, for any reason, it cannot actually start Ant proper. This will only
   affect programs/scripts that called the launcher and which did not want to
   receive an error if Ant itself would not start
 
 * All .NET tasks are now deprecated in favor of the new .NET Antlib:
   http://ant.apache.org/antlibs/dotnet/index.html
 
-------------------------------------------------------------------
Fri Sep 22 14:34:40 CEST 2006 - dbornkessel@suse.de

- read in properties in /etc/ant.conf 
- added source=1.4

-------------------------------------------------------------------
Mon May  8 14:54:11 CEST 2006 - dbornkessel@suse.de

- only ant-antlr updates

-------------------------------------------------------------------
Thu Feb  2 20:55:06 CET 2006 - dbornkessel@suse.de

- fixed rpmlint errors and warnings

-------------------------------------------------------------------
Tue Jan 31 17:29:45 CET 2006 - dbornkessel@suse.de

- only ant-antlr updates

-------------------------------------------------------------------
Fri Jan 27 12:12:48 CET 2006 - dbornkessel@suse.de

- added four missing xsl files
- removed JAVA_HOME magic

-------------------------------------------------------------------
Tue Jan 24 16:55:46 CET 2006 - dbornkessel@suse.de

- Not dependend on xml-commons-apis, which are provided by xerces-j2, which does not 
  depend on ant package (in contrast to old dependency on 
  xml-commons-apis <-> ant)
- optional task are now again in extra spec file ant-antlr

-------------------------------------------------------------------
Thu Jan 19 14:10:18 CET 2006 - dbornkessel@suse.de

- Integrated ant and ant-antlr again in one spec file as there is no 
  dependency loop ... jpackage BuildRequires were wrong.
- updated to version 1.6.5

-------------------------------------------------------------------
Mon Dec 19 10:46:33 CET 2005 - dbornkessel@suse.de

- added if statement that hinders unwanted creation of a file within a for loop

-------------------------------------------------------------------
Thu Sep 29 00:10:39 CEST 2005 - dmueller@suse.de

- add norootforbuild

-------------------------------------------------------------------
Fri Mar  4 13:53:08 CET 2005 - skh@suse.de

- rely on jpackage-utils' java-functions to set JAVA_HOME correctly

-------------------------------------------------------------------
Sun Sep  5 20:00:07 CEST 2004 - skh@suse.de

- create and add /usr/share/java/ant to file list for optional 
  tasks to put their jars into

-------------------------------------------------------------------
Thu Sep  2 15:58:19 CEST 2004 - skh@suse.de

- renamed from apache-ant to ant
- switched to JPackage 1.5 version
- updated to version 1.6.2
- split off optional tasks into separate package to solve build
  dependency loop in JPackage

Places

File ant.changes of Package ant-antlr (Revision 90a53e9a98dc33ff1d972fa32418de19)

Places