Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12:Update
ant.26115
ant.changes
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File ant.changes of Package ant.26115
------------------------------------------------------------------- Mon Sep 19 17:14:38 UTC 2022 - David Anes <david.anes@suse.com> - Add security fix to handle insecure temporary file vulnerability [bsc#1171696, CVE-2020-1945]: * Added patch ant-CVE-2020-1945-1.patch * Added patch ant-CVE-2020-1945-2.patch * Added patch ant-CVE-2020-1945-3.patch - Add security fix to handle insecure temporary file vulnerability [bsc#1177180, CVE-2020-11979]: * Added patch ant-CVE-2020-11979-1.patch * Added patch ant-CVE-2020-11979-2.patch - Compile everything with Java 1.6, as it's required by new security patches. - Simplify dependencies for bootstrap/non-bootstrap versions. ------------------------------------------------------------------- Mon Mar 28 10:01:43 UTC 2022 - David Anes <david.anes@suse.com> - Security fixes: * [CVE-2021-36373, bsc#1188468] excessive memory allocation when reading a specially crafted TAR archive * [CVE-2021-36374, bsc#1188469] excessive memory allocation when reading a specially crafted ZIP archive or a derived formats - Add patches: * ant-CVE-2021-36373-and-CVE-2021-36374.patch ------------------------------------------------------------------- Wed May 6 16:49:40 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com> - Add rhino to the ant-apache-bsf optional tasks [bsc#1134001] ------------------------------------------------------------------- Wed May 6 16:45:22 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com> - Remove jakarta-commons-logging dependencies [bsc#1133997] - Use apache-commons-logging in optional tasks ------------------------------------------------------------------- Thu Aug 16 19:37:00 UTC 2018 - jsikes@suse.de - Add security patch to handle malformed zip file paths bsc#1100053: * apache-ant-unzip-path.patch * CVE-2018-10886 ------------------------------------------------------------------- Sat Jun 28 19:45:04 UTC 2014 - smoioli@suse.com - Update to 1.9.4 - Bug fixes: * <import>/<include> failed when the importing file was loaded from an URI or a jar and it imported a file from the local file system via an absolute path. Bugzilla Report 50953 * <import> could import the same resource twice when imported via different resource types. Bugzilla Report 55097 * several calls to File#mkdirs could fall victim to a race condition where another thread already created the same directory. Bugzilla Report 55290 * <manifestclasspath> created '/' rather than './' for the parent directory of the given jarfile. Bugzilla Report 55049 * <concat>'s fixlastline="true" didn't work when using certain filter readers. Bugzilla Report 54672 * several places where resources are read from jars will now explicitly disable caching to avoid problems with reloading jars. Bugzilla Report 54473 * AntClassloader will now ignore files that are part of the classpath but not zip files when scanning for resources. It used to throw an exception. Bugzilla Report 53964 * <javadoc> caused a NullPointerException when no destdir was set. Bugzilla Report 55949 * <jar filesetmanifest="mergewithoutmain"> would still include the Main section of the fileset manifests if there was no nested manifest or manifest attribute. Bugzilla Report 54171 * reading of compiler args has become more defensive Bugzilla Report 53754 * <copy> without force="true" would not only fail to overwrite a read-only file as expected but also remove the existing file. Bugzilla Report 53095 * <delete removeNotFollowedSymlinks="true"> would remove symbolic links to not-included files. It will still delete symlinks to directories that would have been followed even if they are not explicitly included. exclude-Patterns can still be used to preserve symbolic links. Bugzilla Report 53959 * Sometimes copy-operations using NIO FileChannels fail. Ant will now try to use a Stream based copy operation as fallback when the Channel based copy fails. Bugzilla Reports 53102 and 54397 * Javadoc.postProcessGeneratedJavadocs() fails for Classes that extend Javadoc Bugzilla Report 56047 * TarInputStream will now read archives created by tar implementations that encode big numbers by not adding a trailing NUL. * the isExists() method of URLResource returned false positives for HTTP and FTP URLs. ------------------------------------------------------------------- Thu Apr 24 09:54:12 UTC 2014 - dmueller@suse.com - remove dependency on gpg-offline (blocks rebuilds and tarball integrity is checked by source-validator anyway, plus it was commented out) ------------------------------------------------------------------- Thu Jan 2 08:36:18 UTC 2014 - mvyskocil@suse.com - Update to 1.9.3 - BugFixes: * Ant 1.8 exec task changes have slowed exec to a crawl, apache#54128 * <parallel> swallowed the status code of nested <fail> tasks, apache#55539 * a race condition could make <fixcrlf> tasks of parallel builds to interfere with each other, apache#54393 * <mail>'s mailport still didn't work properly when using smtps, apache#49267 * using attributes belonging to the if and unless namespaces made macrodef fail, apache#55885. * Apt is not available under JDK 1.8, apache#55922 - drop unused macros - add gpg verification ------------------------------------------------------------------- Wed Dec 4 14:58:13 UTC 2013 - mvyskocil@suse.com - use requires_eq instead of manual call of rpm -q ------------------------------------------------------------------- Wed Oct 2 09:52:33 UTC 2013 - mvyskocil@suse.com - install compat symlink to /usr/share/ant/bin/antRun to make scala build ------------------------------------------------------------------- Mon Sep 9 11:05:25 UTC 2013 - tchvatal@suse.com - Move from jpackage-utils to javapackage-tools ------------------------------------------------------------------- Thu Aug 22 07:47:26 UTC 2013 - mvyskocil@suse.com - Update to 1.9.2 - Incompatible changes: * ProjectHelper's implementation import and include tasks defaults the targetPrefix to ProjectHelper.USE_PROJECT_NAME_AS_TARGET_PREFIX. ProjectHelper2 is not affected, apache#54940. * FixCRLF used to treat the EOL value ASIS to convert to the system property line.separator. Specified was that ASIS would leave the EOL characters alone, the task now really leaves the EOL characters alone. This also implies that EOL ASIS will not insert a newline even if fixlast is set to true. apache#53036 * The CommandLauncher hierarchy that used to be a set of inner classes of Execute has been extracted to the org.apache.tools.ant.taskdefs.launcher package. * Any FileResource whose represented File has a parent also has a basedir. * Removing the Perforce Ant tasks replaced by tasks supplied by Perforce Inc. * Setting the default encoding of StringResource to UTF-8 instead of null - Bugfixes: * <javadoc> post-process generated docs to migitiate frame injection attack (CVE-2013-1571) apache#55132 * Parsing of zip64 extra fields has become more lenient * TarInputStream should now properly read GNU longlink entries' names. apache#55040. * <java> and <exec> used to be too restrictive when evaluating whether a given set of options is compatible with spawning the new process, apache#55112. * Corrected XSLTC error in <junitreport>, apache#54641. * and many more, see WHATSNEW for details ------------------------------------------------------------------- Mon Jan 7 12:15:09 UTC 2013 - mvyskocil@suse.com - remove xerces-j2-bootstrap depenency (bnc#789163) ------------------------------------------------------------------- Wed May 30 11:46:44 UTC 2012 - cfarrell@suse.com - license update: CDDL-1.0 SPDX format (note that it should CDDL-1.1 if the (c) owner and license steward is Oracle) ------------------------------------------------------------------- Tue May 15 07:02:23 UTC 2012 - mvyskocil@suse.cz - build ignore java-1_7_0-openjdk as well ------------------------------------------------------------------- Wed Feb 1 12:54:47 UTC 2012 - mvyskocil@suse.cz - revert the Recommends to fix a lot of build fails ------------------------------------------------------------------- Wed Jan 25 09:54:17 UTC 2012 - mvyskocil@suse.cz - use new _mavendepmapfragdir macro instead of hardocded path - change java-devel Requires to Recommends ------------------------------------------------------------------- Tue Jan 3 01:01:19 CET 2012 - dmueller@suse.de - use dist-lite and dist_javadocs to make javadoc build really optional - fix arm check (ifarch does not work in a noarch spec file) ------------------------------------------------------------------- Thu Dec 15 08:49:28 UTC 2011 - mvyskocil@suse.cz - use dist and javadocs targets to make javadoc build really configurable - disable javadoc build on arm to speedup the build of java platform ------------------------------------------------------------------- Sat Sep 17 11:04:48 UTC 2011 - jengelh@medozas.de - Remove redundant tags/sections from specfile ------------------------------------------------------------------- Mon Mar 14 13:02:38 UTC 2011 - mvyskocil@suse.cz - ignore openjdk for build of core ant ------------------------------------------------------------------- Wed Mar 9 08:56:33 UTC 2011 - mvyskocil@suse.cz - Update to ant 1.8.2 * performance improvements in directory scanning * XSLT task honors classpath again (bugrep 49271) * distinction between core tasks and optional tasks is abolished * new task augment allows to add attributes or nested elements to previously defined references * Lexically scoped local properties, i.e. properties that are only defined inside a target, sequential block or similar environment. This is very useful inside of <macrodef>s where a macro can now define a temporary property that will disappear once the task has finished. * <import> can now import from any file- or URL-providing resource - this includes <javaresource>. This means <import> can read build file snippets from JARs or fixed server URLs. There are several other improvements in the area of import. * Various improvements to the directory scanning code that help with symbolic link cycles (as can be found on MacOS X Java installations for example) and improve scanning performance. For big directory trees the improvement is dramatic. * The way developers can extend Ant's property expansion algorithm has been rewritten (breaking the older API) to be easier to use and be more powerful. The whole local properties mechanism is implemented using that API and could be implemented in a separate library without changes in Ant's core. Things like the yet-to-be-released props Antlib can now provide often required "scripty" fuctions without touching Ant itself. At the same time the if and unless attributes have been rewritten to do the expected thing if applied to a property expansion (i.e. if="${foo}" will mean "yes, do it" if ${foo} expands to true, in Ant 1.7.1 it would mean "no" unless a property named "true" existed). This adds "testing conditions" as a new use-case to property expansion. * A new top-level element <extension-point> assists in writing re-usable build files that are meant to be imported. <extension-point> has a name and a dependency-list like <target> and can be used like a <target> from the command line or a dependency-list but the importing build file can add targets to the <extension-point>'s depends list. * Ant now requires Java 1.4 or later new task include provides an alternative to <import> that should be preferred when you don't want to override any targets * numerous bug fixes and improvements as documented in Bugzilla and in WHATSNEW - merge the nodeps and trax packages to main one - build ant-antlr.spec using openjdk - add ant-apache-xalan2 and ant-testutil - remove all pom files, as they are included and build from source tarball ------------------------------------------------------------------- Fri Apr 9 10:41:42 UTC 2010 - mvyskocil@suse.cz - fix bnc#595144 - Compiled binary in ant remove test.exe from source tarball ------------------------------------------------------------------- Thu Mar 18 15:58:41 UTC 2010 - mvyskocil@suse.cz - fix the compat symlinks ------------------------------------------------------------------- Wed Mar 17 15:05:43 UTC 2010 - mvyskocil@suse.cz - return back the /usr/share/ant/lib compat symlinks http://lists.opensuse.org/opensuse-java/2010-03/msg00007.html ------------------------------------------------------------------- Wed Jun 17 10:22:10 CEST 2009 - mvyskocil@suse.cz - do not use Release number in Requires of subpackages ------------------------------------------------------------------- Sun May 3 11:37:14 CEST 2009 - ro@suse.de - do not assume release number for ant and ant-antlr are identical ------------------------------------------------------------------- Tue Apr 28 15:03:07 CEST 2009 - mvyskocil@suse.cz - update to 1.7.1. Upstream changes (full list is in WHATSNEW): * String resources only have properties single expanded. If you relied on <string> resources being expanded more than once, it no longer happens. Bugzilla report 42277. * A String resource's encoding attribute was only taken into account when set from the resource's OutputStream; the InputStream provided the String's binary content according to the platform's default encoding. Behavior has been modified to encode outgoing (InputStream) content as well as encoding incoming (OutputStream) content. * <java> with fork now returns gives -1 instead of 0 as result when * failonerror is false and some exception (including timeout) occurs. Br 42377. * ant-type attribute has been marked as deprecated and a warning has been issued if it is encountered in the build file. * FileUtils.createTempFile now actually creates the file. The TempFile task still does not create the file by default, can be instructed to do so however using a new parameter. Bugzilla report 33969. - added maven pom files from jpackage project - synchronized ant.spec with jpackage.org 5.0 - used ant-antlr-prepare.sh for generate of ant-antlr.spec from ant.spec to keep them synchronized. Build is branched using value of %%bootstrap macro: * bootstrap == 1 means build ant, ant-{jmf,nodeps,scripts,swing,trax} * bootstrap == 0 means build rest of ant modules + ant-javadoc ------------------------------------------------------------------- Mon Nov 3 11:45:06 CET 2008 - mvyskocil@suse.cz - [bnc#440645] - ant fails without installed jdk: - added a java-devel to Recommends: ------------------------------------------------------------------- Mon Jul 21 16:29:31 CEST 2008 - ro@suse.de - use xerces-j2-bootstrap to build (as early as possible) - add java doc dir to filelist of javadoc subpackage to fix build ------------------------------------------------------------------- Wed Jul 16 14:11:41 CEST 2008 - coolo@suse.de - avoid another build cycle ------------------------------------------------------------------- Wed May 7 10:45:27 CEST 2008 - mvyskocil@suse.cz - build using gcj, to allow a openjdk6 bootstrap - change a source and a target level to 1.5 in build.xml ------------------------------------------------------------------- Tue Aug 14 13:52:03 CEST 2007 - skh@suse.de - disable junit tests and remove junit from BuildRequires to break circular build dependency ------------------------------------------------------------------- Fri Jul 6 19:24:52 CEST 2007 - dbornkessel@suse.de - update to version 1.7.0 major changes are (for a complete list, consult /usr/share/doc/packages/ant/WHATSNEW): Changes that could break older environments: ------------------------------------------- * Initial support for JDK 6 (JSR 223) scripting. <*script*> tasks will now use javax.scripting if BSF is not available, or if explicitly requested by using a "manager" attribute. * The -noproxy option which was in the previous 1.7 alpha and beta releases has been removed. It is the default behavior and not needed. * Removed launcher classes from nodeps jar. * <classconstants> filter reader uses ISO-8859-1 encoding to read the java class file. Bugzilla report 33604. * Defer reference process. Bugzilla 36955, 34458, 37688. This may break build files in which a reference was set in a target which was never executed. Historically, Ant would set the reference early on, during parse time, so the datatype would be defined. Now it requires the reference to have been in a bit of the build file which was actually executed. If you get an error about an undefined reference, locate the reference and move it somewhere where it is used, or fix the depends attribute of the target in question to depend on the target which defines the reference/datatype. * <script> and <scriptdef> now set the current thread context. * Unrestrict the dbvendor names in the websphere element of the ejbjar task. Bugzilla Report 40475. * <env> nested element in <java>, <exec> and others is now case-insensitive for windows OS. Bugzilla Report 28874. * Removed support for xalan1 completely. Users of Xalan1 for Ant builds will have to stay at ant 1.6.5 or upgrade to xalan2. * Use org.apache.log4j.Logger instead of org.apache.log4j.Category. Category has been deprecated for ~2 years and has been removed from the log4j code. Logger was introduced in log4j 1.2 so users of log4j 1.1 and log4j 1.0 need to upgrade to a newer version of log4j. Bugzilla Report 31951. * build.sysclasspath now also affects the bootclasspath handling of spawned Java VMs. If you set build.sysclasspath to anything other than "ignore" (or leave it unset, since "ignore" is the default when it comes to bootclasspath handling), then the bootclasspath of the VM running Ant will be added to the bootclasspath you've specified. * The <java fork="false"> now as per default installs a security manager using the default permissions. This is now independent of the failonerror attribute. Bugzilla report 33361. * <signjar> now notices when the jar and signedjar are equal, and switches to the same dependency logic as when signedjar is omitted. This may break something that depended upon signing in this situation. However, since invoking the JDK jarsigner program with -signedjar set to the source jar actually crashes the JVM on our (Java1.5) systems, we don't think any build files which actually worked will be affected by the change. * <signjar> used to ignore a nested fileset when a jar was also provided as an attribute, printing a warning message; now it signs files in the fileset. * An improved method of handling timestamp granularity differences between client and server was added to the <ftp> task. FTP servers typically have HH:mm timestamps whereas local filesystems have HH:mm:ss timestamps. Previously, this required tweaking with the timediffmillis attribute which also was used to handle timezone differences. Now, there is a new timestampgranularity attribute. The default value for get operations is 0 since the user has the more powerful preservelastmodified attribute to work with. Since this is not available on put operations the default value adds a minute to the server timestamp in order to account for this, Scripts which previously used timediffmillis to do this compensation may need to be rewritten. timediffmillis has now been deprecated. * On Java1.5+, Ant automatically sets the system property java.net.useSystemProxies to true, which gives it automatic use of the local IE (Windows) or Gnome2 (Unix/Linux) proxy settings. This may break any build file that somehow relied on content outside the firewall being unreachable: use the -noproxy command-line option to disable this new feature. Note that the Java1.5 proxy configuration system still does not appear to work reliably on Windows or Linux. * Support for the XSL:P XML parser has been removed. Bugzilla Report 23455. * Visual Age for Java optional tasks removed. * Testlet (test) optional task removed. * Icontract optional task removed. * Metamata (maudit, mmetrics, and mparse tasks) removed. * Sitraka (jpcoverage, jpcovmerge, jpcovreport) tasks suppressed. * <fixcrlf> used \r (Mac) line endings on OS X, whose proper line separator is \n (Unix). Bugzilla report 39585. * <scp> now optionally supports the sftp protocol, you may need a newer jsch.jar. Bugzilla Report 39373. * Ant launcher program prints errors to stderr, and exits with a 2 exit code value if, for any reason, it cannot actually start Ant proper. This will only affect programs/scripts that called the launcher and which did not want to receive an error if Ant itself would not start * All .NET tasks are now deprecated in favor of the new .NET Antlib: http://ant.apache.org/antlibs/dotnet/index.html ------------------------------------------------------------------- Fri Sep 22 14:34:40 CEST 2006 - dbornkessel@suse.de - read in properties in /etc/ant.conf - added source=1.4 ------------------------------------------------------------------- Mon May 8 14:54:11 CEST 2006 - dbornkessel@suse.de - only ant-antlr updates ------------------------------------------------------------------- Thu Feb 2 20:55:06 CET 2006 - dbornkessel@suse.de - fixed rpmlint errors and warnings ------------------------------------------------------------------- Tue Jan 31 17:29:45 CET 2006 - dbornkessel@suse.de - only ant-antlr updates ------------------------------------------------------------------- Fri Jan 27 12:12:48 CET 2006 - dbornkessel@suse.de - added four missing xsl files - removed JAVA_HOME magic ------------------------------------------------------------------- Tue Jan 24 16:55:46 CET 2006 - dbornkessel@suse.de - Not dependend on xml-commons-apis, which are provided by xerces-j2, which does not depend on ant package (in contrast to old dependency on xml-commons-apis <-> ant) - optional task are now again in extra spec file ant-antlr ------------------------------------------------------------------- Thu Jan 19 14:10:18 CET 2006 - dbornkessel@suse.de - Integrated ant and ant-antlr again in one spec file as there is no dependency loop ... jpackage BuildRequires were wrong. - updated to version 1.6.5 ------------------------------------------------------------------- Mon Dec 19 10:46:33 CET 2005 - dbornkessel@suse.de - added if statement that hinders unwanted creation of a file within a for loop ------------------------------------------------------------------- Thu Sep 29 00:10:39 CEST 2005 - dmueller@suse.de - add norootforbuild ------------------------------------------------------------------- Fri Mar 4 13:53:08 CET 2005 - skh@suse.de - rely on jpackage-utils' java-functions to set JAVA_HOME correctly ------------------------------------------------------------------- Sun Sep 5 20:00:07 CEST 2004 - skh@suse.de - create and add /usr/share/java/ant to file list for optional tasks to put their jars into ------------------------------------------------------------------- Thu Sep 2 15:58:19 CEST 2004 - skh@suse.de - renamed from apache-ant to ant - switched to JPackage 1.5 version - updated to version 1.6.2 - split off optional tasks into separate package to solve build dependency loop in JPackage
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
