File apache-ivy.changes of Package apache-ivy

Overview Repositories Revisions Requests Users Attributes Meta

File apache-ivy.changes of Package apache-ivy (Revision f755513b242840039b9448d0a77a346c)

Currently displaying revision f755513b242840039b9448d0a77a346c , Show latest

-------------------------------------------------------------------
Mon Aug 21 23:30:17 UTC 2023 - Fridrich Strba <fstrba@suse.com>

- Upgrade to version 2.5.2 (bsc#1214422)
  * Fixes:
    + ivy:retrieve could fail because of a 'NullPointerException' 
      (jira:IVY-1641[])
    + reading POMs may loose dependencies when multiple Maven
      dependencies only differ in 'classifier' (jira:IVY-1642[])
    + CVE-2022-46751: Apache Ivy Is Vulnerable to XML External
      Entity Injections

-------------------------------------------------------------------
Mon Nov  7 08:10:54 UTC 2022 - David Anes <david.anes@suse.com>

- Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138)
  * Breaking: 
    + Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition 
      file.
  * Fixes:
    + CVE-2022-37865 allow create/overwrite any file on the system.
      (see https://ant.apache.org/ivy/security.html)
    + CVE-2022-37866 Path traversal in patterns.
      (see https://ant.apache.org/ivy/security.html)
    + ResolveEngine resets dictator resolver to null in the global 
      configuration.
    + ConcurrentModificationException in 
      MessageLoggerHelper.sumupProblems.
    + useOrigin="true" fails with file-based ibiblio.
    + ivy:retrieve Ant task didn’t create an empty fileset when no 
      files were retrieved to a non-empty directory.
    + ivy:retrieve Ant task relied on the default HTTP header 
      "Accept" which caused problems with servers that interpret it 
      strictly (e.g. AWS CodeArtifact).
  * Improvements:
    + Ivy command now accepts a URL for the -settings option.

-------------------------------------------------------------------
Sat Mar 19 13:22:59 UTC 2022 - Fridrich Strba <fstrba@suse.com>

- Upgrade to upstream version 2.5.0
- Force building with JDK < 14, since it imports statically a class
  removed in JDK14
- Change dependencies for the httpclient to httpcomponents-client
  instead of apache-commons-httpclient
- Modified patch:
  * apache-ivy-global-settings.patch
    + implement the same functionality with a bit of less code
- Removed patches:
  * apache-ivy-2.4.0-jdk9.patch
  * port-to-bc-1.52.patch
    + not needed with this version

-------------------------------------------------------------------
Tue Dec 10 22:39:53 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Specify bundle.version in order to avoid unexpanded macro

-------------------------------------------------------------------
Tue Sep 24 16:08:31 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Build the bouncycastle signer plugin since bcpg is now present
- Added patch:
  * port-to-bc-1.52.patch
    + Allow building the signer plugin against bouncycastle >= 1.52

-------------------------------------------------------------------
Tue Jul  2 09:22:21 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Add possibility to build with ssh and vfs integration, since
  we have all the dependencies in openSUSE.

-------------------------------------------------------------------
Mon Apr  8 18:12:07 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Remove the reference to parent from pom file, since we are not
  building using maven.

-------------------------------------------------------------------
Thu Feb  7 14:48:24 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Add apache-ivy/ivy.jar symlink

-------------------------------------------------------------------
Mon Nov 26 10:25:21 UTC 2018 - Fridrich Strba <fstrba@suse.com>

- Upgrade to version 2.4.0
- Modified patch:
  * apache-ivy-2.3.0-jdk9.patch -> apache-ivy-2.4.0-jdk9.patch
    + rediff to changed context
- Added patch:
  * apache-ivy-global-settings.patch
    + change global settings

-------------------------------------------------------------------
Tue May 15 13:26:55 UTC 2018 - fstrba@suse.com

- Modified patch:
  * apache-ivy-2.3.0-jdk9.patch
    + Build with source and target 8 to prepare for a possible
      removal of 1.6 compatibility
- Run fdupes on documentation

-------------------------------------------------------------------
Thu Sep  7 17:10:15 UTC 2017 - fstrba@suse.com

- Added patch:
  * apache-ivy-2.3.0-jdk9.patch
    + Use source and target version 1.6 to enable build with jdk9

-------------------------------------------------------------------
Sun May 21 08:01:08 UTC 2017 - tchvatal@suse.com

- Reduce deps a bit

-------------------------------------------------------------------
Fri May 19 10:07:03 UTC 2017 - pcervinka@suse.com

- New build dependency: javapackages-local

-------------------------------------------------------------------
Wed Mar 18 09:46:01 UTC 2015 - tchvatal@suse.com

- Fix build with new javapackages-tools

-------------------------------------------------------------------
Tue Jul  8 11:01:30 UTC 2014 - tchvatal@suse.com

- Do not depend on ant-nodeps.

-------------------------------------------------------------------
Wed Nov  6 10:58:10 UTC 2013 - mvyskocil@suse.com

- Remove jakarta-commons-httpclient3, we do no longer provide it
- Add ant.d config snippet for ivy
- call add_maven_depmap

-------------------------------------------------------------------
Mon Sep  9 11:04:12 UTC 2013 - tchvatal@suse.com

- Move from jpackage-utils to javapackage-tools

-------------------------------------------------------------------
Fri Jan 25 15:03:33 UTC 2013 - archie@dellroad.org

- Upgrade to release 2.3.0
  * improved Ant support with some new Ant tasks and enhancements to existing tasks
  * improved Maven2 compatibility
  * some new resolvers
  * numerous bug fixes as documented in Jira and in the release notes

-------------------------------------------------------------------
Wed Jan  2 17:08:16 UTC 2013 - archie@dellroad.org

- Define ${target.ivy.version} during build
- Include an ivy(1) command line script and man page

-------------------------------------------------------------------
Mon Jan 16 14:55:55 UTC 2012 - mvyskocil@suse.cz

- Initial SUSE packaging of apache-ivy 2.2.0
  (without signing support)

Places

File apache-ivy.changes of Package apache-ivy (Revision f755513b242840039b9448d0a77a346c)

Places