File log4j.changes of Package log4j.22519

Overview Repositories Revisions Requests Users Attributes Meta

File log4j.changes of Package log4j.22519

-------------------------------------------------------------------
Wed Jan 19 10:24:21 UTC 2022 - Fridrich Strba <fstrba@suse.com>

- Remove the chainsaw sub-package (bsc#1194844, CVE-2022-23307)
- Remove src/main/java/org/apache/log4j/jdbc/JDBCAppender.java from
  the build to mitigate bsc#1194843, CVE-2022-23305
- Remove src/main/java/org/apache/log4j/net/JMSSink.java from the
  build to mitigate bsc#1194842, CVE-2022-23302
- Obsolete chainsaw < 2.1 by the log4j package
- Added patch:
  * log4j-missingmodules.patch
    + do not package org.apache.log4j.chainsaw classes
    + package org.apache.log4j.pattern classes that will be needed
      by apache-log4j-extras which is a dependency of chainsaw 2.x

-------------------------------------------------------------------
Thu Dec 16 10:11:54 UTC 2021 - Peter Simons <psimons@suse.com>

- Remove src/main/java/org/apache/log4j/net/JMSAppender.java from
  the build to mitigate CVE-2021-4104. [bsc#1193662]

-------------------------------------------------------------------
Thu Jan  2 10:40:00 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>

- Security fix: [bsc#1159646, CVE-2019-17571]
  * Remote code execution: Deserialization of untrusted data in SocketServer
  * Backported from CVE-2017-5645 for Log4j 2.8.2
- Add log4j-CVE-2019-17571.patch
- Use fdupes macro to avoid duplicated files

-------------------------------------------------------------------
Wed Jan 10 13:45:44 UTC 2018 - bwiedemann@suse.com

- Add log4j-reproducible.patch to drop javadoc timestamps to make
  package builds more reproducible (boo#1047218)

-------------------------------------------------------------------
Tue Sep 12 07:10:10 UTC 2017 - fstrba@suse.com

- Specify java source and target level 1.6 to allow building with
  jdk9

-------------------------------------------------------------------
Mon Mar  2 13:17:50 UTC 2015 - tchvatal@suse.com

- Version bump to 1.2.17 latest 1.2 series:
  * No short changelog provided - many small changes
- Try to avoid cycle between log4j and apache-common-loggings
- Remove obsoleted patch:
  * log4j-jmx-Agent.patch
- Refresh patch to apply to new source:
  * log4j-mx4j-tools.patch

-------------------------------------------------------------------
Mon Mar  2 12:37:05 UTC 2015 - tchvatal@suse.com

- Cleanup with a spec-cleaner so I can understand what
  is going around here.

-------------------------------------------------------------------
Thu Sep 12 08:44:08 UTC 2013 - mvyskocil@suse.com

- log4j and log4j-mini are in conflict

-------------------------------------------------------------------
Mon Sep  9 11:06:12 UTC 2013 - tchvatal@suse.com

- Move from jpackage-utils to javapackage-tools

-------------------------------------------------------------------
Tue Jul 16 14:05:53 CEST 2013 - mls@suse.de

- get rid of wrong dir modifier in filelist

-------------------------------------------------------------------
Thu Dec 10 11:11:47 UTC 2009 - mvyskocil@suse.cz

- refreshed patches
  * log4j-javadoc-xlink.patch
  * log4j-jmx-Agent.patch
  * log4j-logfactor5-userdir.patch
  * log4j-mx4j-tools.patch

-------------------------------------------------------------------
Wed Jul 16 12:52:50 CEST 2008 - coolo@suse.de

- even more packages to build ignore

-------------------------------------------------------------------
Fri Jun 27 10:54:27 CEST 2008 - coolo@suse.de

- avoid build cycle between axis and log4j

-------------------------------------------------------------------
Tue May  6 12:36:44 CEST 2008 - mvyskocil@suse.cz

- removed a dots in a names of geronimo-* packages

-------------------------------------------------------------------
Tue Apr  8 11:26:43 CEST 2008 - mvyskocil@suse.cz

- updated to 1.2.5 [bnc#355798]
- merged a spec with jpackage 1.7
  - the ant arguments was splitted to several lines
  - new BuildRequires: 
    - classpathx-javamail
    - geronimo-jaf
    - geronimo-jms
  - a new patches to break of a dependendy on Sun's HtmlAdaptorServer 
    (replaced by HttpAdaptor from mx4j package)
  - added a gjc build branch
- created an autogenerated -mini specfile used for bootstrap (hint from sbrabec@suse.cz)
  - added an explicit provides of log4j symbol for log4j-mini (automatically by script)
- replaced a name `macro' by `real', because the -mini package has a different name
- disable the javadoc and manual subpackages for -mini build

-------------------------------------------------------------------
Thu Jun  7 15:35:03 CEST 2007 - sbrabec@suse.cz

- Removed invalid desktop Category "Application" (#254654).

-------------------------------------------------------------------
Fri May 18 11:48:26 CEST 2007 - dbornkessel@suse.de

- removed mx4j BuildReq to avoid build cycle ... apparently it was not used at compile time

-------------------------------------------------------------------
Tue May  8 17:10:47 CEST 2007 - dbornkessel@suse.de

- use mx4j instead of jmx

-------------------------------------------------------------------
Wed Feb 15 10:14:39 CET 2006 - stbinner@suse.de

- add GenericName to .desktop files

-------------------------------------------------------------------
Wed Jan 25 21:46:52 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Tue Nov  8 15:27:34 CET 2005 - jsmeix@suse.de

- Current version 1.2.12 from JPackage.org

-------------------------------------------------------------------
Thu Sep 29 00:25:43 CEST 2005 - dmueller@suse.de

- add norootforbuild

-------------------------------------------------------------------
Thu Nov 25 02:36:46 CET 2004 - ro@suse.de

- added suse_update_desktop_file

-------------------------------------------------------------------
Thu Sep 23 14:19:10 CEST 2004 - mskibbe@suse.de

- change specfile(suse_update_desktop_file)

-------------------------------------------------------------------
Thu Sep 16 14:26:11 CEST 2004 - skh@suse.de

- Fix prerequires for javadoc subpackage.

-------------------------------------------------------------------
Thu Sep  2 17:44:52 CEST 2004 - skh@suse.de

- Initial package created with version 1.2.8 (JPackage 1.5)

Places

File log4j.changes of Package log4j.22519

Places