Author: ebourg-guest Date: 2013-12-03 10:07:18 +0000 (Tue, 03 Dec 2013) New Revision: 17552
Added: tags/libcommons-fileupload-java/1.3-3/ tags/libcommons-fileupload-java/1.3-3/debian/changelog tags/libcommons-fileupload-java/1.3-3/debian/compat tags/libcommons-fileupload-java/1.3-3/debian/control tags/libcommons-fileupload-java/1.3-3/debian/maven.properties tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch tags/libcommons-fileupload-java/1.3-3/debian/patches/series tags/libcommons-fileupload-java/1.3-3/debian/rules Removed: tags/libcommons-fileupload-java/1.3-3/debian/changelog tags/libcommons-fileupload-java/1.3-3/debian/compat tags/libcommons-fileupload-java/1.3-3/debian/control tags/libcommons-fileupload-java/1.3-3/debian/maven.properties tags/libcommons-fileupload-java/1.3-3/debian/patches/series tags/libcommons-fileupload-java/1.3-3/debian/rules Log: [svn-buildpackage] Tagging libcommons-fileupload-java 1.3-3 Deleted: tags/libcommons-fileupload-java/1.3-3/debian/changelog =================================================================== --- trunk/libcommons-fileupload-java/debian/changelog 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/changelog 2013-12-03 10:07:18 UTC (rev 17552) @@ -1,259 +0,0 @@ -libcommons-fileupload-java (1.3-2) unstable; urgency=low - - * Team upload. - * Upload to unstable. - - -- tony mancill <[email protected]> Thu, 23 May 2013 21:15:43 -0700 - -libcommons-fileupload-java (1.3-1) experimental; urgency=low - - * Team upload - * New upstream release. - * Upgraded the dependency on the Servlet API (2.5 -> 3.0) - * Enabled the unit tests - * Removed Michael Koch from the uploaders list (Closes: #654055) - * Bump Standards-Version to 3.9.4 (no changes) - * Machine-readable debian/copyright file (DEP5) - - -- Emmanuel Bourg <[email protected]> Tue, 23 Apr 2013 18:10:12 +0200 - -libcommons-fileupload-java (1.2.2-1) unstable; urgency=low - - * New upstream release. - * New libcommons-fileupload-java-doc package for Javadoc. - * Bump Standards-Version to 3.9.1: - - Add recommended get-orig-source target in d/rules. - * d/dirs: Remove, uneeded. - * Switch to maven-debian-helper for build: - - Drop all patches on old Ant build. - - Add maven-debian-helper to B-D. - - Drop ant from B-D. - * Don't Depends on a JRE (not requested anymore by Java Policy for - libraries packages). - - -- Damien Raude-Morvan <[email protected]> Wed, 04 Aug 2010 13:57:04 +0200 - -libcommons-fileupload-java (1.2.1-5) unstable; urgency=low - - * (Build-)Depend on libservlet2.5-java instead of libservlet2.4-java - - -- Thierry Carrez <[email protected]> Fri, 11 Jun 2010 15:19:56 +0200 - -libcommons-fileupload-java (1.2.1-4) unstable; urgency=low - - [ Thierry Carrez ] - * Minimal dependency on default-jre-headless | java2-runtime-headless - * debian/ant.properties: Force Java2 code to match dependency - - [ Damien Raude-Morvan ] - * Remove Arnaud from Uploaders. - * Add myself to Uploaders. - * Bump Standards-Version to 3.8.4: no changes needed - * Bump debhelper to >= 7 - * Remove version criteria from cdbs B-D (even stable match version) - * Enable portlet support: - - Remove debian/patches/04_disable-portlet.patch - - Add B-D-I on libportlet-api-2.0-spec-java - - Remove debian/README.Debian - (Closes: #577474) - * Convert to source format 3.0 (quilt) - - Refresh all patches - - Add DEP3 headers to patches - * Register in maven repository: - - B-D-I on maven-repo-helper - - Use mh_installpoms and mh_installjar - - -- Damien Raude-Morvan <[email protected]> Mon, 12 Apr 2010 12:42:16 +0200 - -libcommons-fileupload-java (1.2.1-3) unstable; urgency=low - - * (Build-)Depends on default-jdk. - * (Build-)Depends on libservlet2.4-java. - - -- Michael Koch <[email protected]> Wed, 16 Sep 2009 22:15:26 +0200 - -libcommons-fileupload-java (1.2.1-2) unstable; urgency=low - - [ Emmanuel Bourg ] - * Update of the URLs - * Rename Jakarta Commons to Apache Commons. - * debian/copyright: Switch to Apache License 2.0. Closes: #532889. - - [ Michael Koch ] - * Add '${misc:Depends}' to Depends of libcommons-fileupload-java. - * Converted debian/copyright to UTF-8. - * Move package to section 'java'. - * Update debhelper to >= 5. - * Update Standards-Version 3.8.3. - - -- Michael Koch <[email protected]> Sun, 06 Sep 2009 21:39:24 +0200 - -libcommons-fileupload-java (1.2.1-1) unstable; urgency=low - - [ Michael Koch ] - * New upstream release - * Updated Standards-Version to 3.7.3. - - [ Kumar Appaiah ] - * Update watch file. - * debian/control: - + Add Vcs-{Svn,Browser}. - + Add Homepage field. - - -- Michael Koch <[email protected]> Thu, 14 Feb 2008 17:41:57 +0100 - -libcommons-fileupload-java (1.2-2) unstable; urgency=low - - * Added Depends on libcommons-io-java. Closes: #439860. - - -- Michael Koch <[email protected]> Sat, 01 Sep 2007 22:19:03 +0200 - -libcommons-fileupload-java (1.2-1) unstable; urgency=low - - * New upstream release. Closes: #429638. - - added README.Debian with info about disabled portlet support - - updated patches/01-build-jar-without-test-fix.patch - * Use java-gcj-compat instead of kaffe. - * Renamed debian/patches/02_jikes_1.3.patch to - debian/patches/02_java13.patch and to make sure to have compatibility with - Java 1.3. - * Moved cdbs and debhelper from Build-Depends-Indep to Build-Depends. - * Fixed usage of Homepage: tag in package description. - * Removed Wolfgang and added myself to Uploads - * Updated Standards-Version. - * Removed ant-launcher.jar from explicit list of jars. - * Removed debian/libcommons-fileupload-java.links, debian/install and - debian/links and do the needed stuff in debian/rules. - - -- Michael Koch <[email protected]> Sat, 21 Jul 2007 13:08:32 +0200 - -libcommons-fileupload-java (1.0-14) unstable; urgency=low - - * kaffe compiler transition - * Bump debhelper version to fix linda error - * Removed version constraints already fulfilled by stable - * Formatted description - * Removed unused and wrong README.Debian - * Standards-Version 3.6.2 (no changes) - * Added myself to uploaders - - -- Wolfgang Baer <[email protected]> Wed, 1 Feb 2006 22:44:18 +0100 - -libcommons-fileupload-java (1.0-13) unstable; urgency=low - - * libant1.6-java to ant transition - - -- Arnaud Vandyck <[email protected]> Sat, 20 Aug 2005 19:52:56 +0200 - -libcommons-fileupload-java (1.0-12) unstable; urgency=low - - * debian/control (Build-Depends-Indep, Depends): changed the kaffe - version (closes: #302015) - * Standards-Version: 3.6.1, nothing to change - - -- Arnaud Vandyck <[email protected]> Tue, 5 Apr 2005 16:38:16 +0200 - -libcommons-fileupload-java (1.0-11) unstable; urgency=low - - * build with kaffe - * generate the javadoc - - -- Arnaud Vandyck <[email protected]> Wed, 2 Mar 2005 23:10:46 +0100 - -libcommons-fileupload-java (1.0-10) unstable; urgency=low - - * added a build-dep on libgnujaxp-java because sablevm does not embed - gnujaxp at the moment! (closes: #272387). - - -- Arnaud Vandyck <[email protected]> Tue, 28 Sep 2004 11:34:15 +0200 - -libcommons-fileupload-java (1.0-9) unstable; urgency=low - - * added a patch to force jikes to build against 1.3 (closes: #269254) - * sablevm is used to launch ant and jikes. - * no javadoc at the moment - - -- Arnaud Vandyck <[email protected]> Tue, 14 Sep 2004 13:25:23 +0200 - -libcommons-fileupload-java (1.0-8) unstable; urgency=low - - * debian/watch: added. - - -- Arnaud Vandyck <[email protected]> Sun, 15 Aug 2004 01:54:04 +0200 - -libcommons-fileupload-java (1.0-7) unstable; urgency=low - - * Now really move to main! - - -- Arnaud Vandyck <[email protected]> Sun, 25 Jul 2004 18:36:30 +0200 - -libcommons-fileupload-java (1.0-6) unstable; urgency=low - - * Move to main! Now that libservlet2.3-java is in main, this lib can - move to main - - -- Arnaud Vandyck <[email protected]> Sun, 25 Jul 2004 17:56:26 +0200 - -libcommons-fileupload-java (1.0-5) unstable; urgency=low - - * Removed the dependency to dpatch, update kaffe dependency to 1.1.3, - removed the junit dependency. I now use the cdbs simple-patchsys. - * debian/rules: clean up. - - -- Arnaud Vandyck <[email protected]> Sat, 24 Jan 2004 01:12:16 +0100 - -libcommons-fileupload-java (1.0-4) unstable; urgency=low - - * debian/links: changed the symlink. Thanks to Giuseppe Sacco (closes: - #226928). - - -- Arnaud Vandyck <[email protected]> Sat, 10 Jan 2004 01:05:23 +0100 - -libcommons-fileupload-java (1.0-3) unstable; urgency=low - - * debian/control (Maintainer) (Uploaders): Debian Java Maintainers is - now the maintainer and I added my debian email address to the - Uploaders field. - * debian/README.Debian: Added an explanation why in contrib. - - -- Arnaud Vandyck <[email protected]> Wed, 7 Jan 2004 17:33:53 +0100 - -libcommons-fileupload-java (1.0-2) unstable; urgency=low - - * Build system is now cdbs! the junit test is no more perform at the - moment, a patch has been applyied to suppress it from the build file - * junit is not needed when running (only for test at build time), kaffe - maybe used to run the library, libant-1.5-java is used to build - * I patched build.xml to remove entities because of a bug in kaffe-1.1.1 - (gnujaxp) so now it builds with kaffe... - * Waiting for libservlet2.3-java in main to be in main - - -- Arnaud Vandyck <[email protected]> Sun, 5 Oct 2003 01:58:49 +0200 - -libcommons-fileupload-java (1.0-1) unstable; urgency=low - - * New upstream release - * I do not need to patch build.xml anymore because upstream changed - it. I just have to override the libdir property in - debian/rules. Thanks to Martin Cooper. - * There is no more a libcommons-fileupload-java-doc package because it's - to small, so I merged it with the library (dist/doc/*). - * The jar is now in dist directory. - - -- Arnaud Vandyck <[email protected]> Mon, 30 Jun 2003 15:10:36 +0200 - -libcommons-fileupload-java (0.99beta1-2) unstable; urgency=low - - * Library compiled by jikes. Does not need JAVA_HOME anymore - * Typo in description - * Correct version dependency (beanutils) - * Correct the CLASSPATH (do not use version number of the jars) - - -- Arnaud Vandyck <[email protected]> Fri, 30 May 2003 10:18:57 +0200 - -libcommons-fileupload-java (0.99beta1-1) unstable; urgency=low - - * Initial Release. - - -- Arnaud Vandyck <[email protected]> Sun, 13 Apr 2003 18:45:44 +0200 - Copied: tags/libcommons-fileupload-java/1.3-3/debian/changelog (from rev 17547, trunk/libcommons-fileupload-java/debian/changelog) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/changelog (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/changelog 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,284 @@ +libcommons-fileupload-java (1.3-3) unstable; urgency=low + + * Set the project.build.sourceEncoding property to fix a test failure + (Closes: #730970) + * Removed the Servlet and the Portlet APIs from the runtime dependencies + since they are provided by the Servlet container. + * Install the upstream changelog + * debian/control: + - Standards-Version updated to 3.9.5 (no changes) + - Use canonical URLs for the Vcs-* fields + * Switch to debhelper level 9 + + -- Emmanuel Bourg <[email protected]> Tue, 03 Dec 2013 08:35:15 +0100 + +libcommons-fileupload-java (1.3-2.1) unstable; urgency=low + + * Non-maintainer upload. + * Add CVE-2013-2186.patch patch. + CVE-2013-2186: Arbitrary file upload via deserialization. Properly validate + repository in org.apache.commons.fileupload.disk.DiskFileItem. + Thanks to Marc Deslauriers <[email protected]> for + providing the debdiff. (Closes: #726601) + + -- Salvatore Bonaccorso <[email protected]> Fri, 15 Nov 2013 15:04:17 +0100 + +libcommons-fileupload-java (1.3-2) unstable; urgency=low + + * Team upload. + * Upload to unstable. + + -- tony mancill <[email protected]> Thu, 23 May 2013 21:15:43 -0700 + +libcommons-fileupload-java (1.3-1) experimental; urgency=low + + * Team upload + * New upstream release. + * Upgraded the dependency on the Servlet API (2.5 -> 3.0) + * Enabled the unit tests + * Removed Michael Koch from the uploaders list (Closes: #654055) + * Bump Standards-Version to 3.9.4 (no changes) + * Machine-readable debian/copyright file (DEP5) + + -- Emmanuel Bourg <[email protected]> Tue, 23 Apr 2013 18:10:12 +0200 + +libcommons-fileupload-java (1.2.2-1) unstable; urgency=low + + * New upstream release. + * New libcommons-fileupload-java-doc package for Javadoc. + * Bump Standards-Version to 3.9.1: + - Add recommended get-orig-source target in d/rules. + * d/dirs: Remove, uneeded. + * Switch to maven-debian-helper for build: + - Drop all patches on old Ant build. + - Add maven-debian-helper to B-D. + - Drop ant from B-D. + * Don't Depends on a JRE (not requested anymore by Java Policy for + libraries packages). + + -- Damien Raude-Morvan <[email protected]> Wed, 04 Aug 2010 13:57:04 +0200 + +libcommons-fileupload-java (1.2.1-5) unstable; urgency=low + + * (Build-)Depend on libservlet2.5-java instead of libservlet2.4-java + + -- Thierry Carrez <[email protected]> Fri, 11 Jun 2010 15:19:56 +0200 + +libcommons-fileupload-java (1.2.1-4) unstable; urgency=low + + [ Thierry Carrez ] + * Minimal dependency on default-jre-headless | java2-runtime-headless + * debian/ant.properties: Force Java2 code to match dependency + + [ Damien Raude-Morvan ] + * Remove Arnaud from Uploaders. + * Add myself to Uploaders. + * Bump Standards-Version to 3.8.4: no changes needed + * Bump debhelper to >= 7 + * Remove version criteria from cdbs B-D (even stable match version) + * Enable portlet support: + - Remove debian/patches/04_disable-portlet.patch + - Add B-D-I on libportlet-api-2.0-spec-java + - Remove debian/README.Debian + (Closes: #577474) + * Convert to source format 3.0 (quilt) + - Refresh all patches + - Add DEP3 headers to patches + * Register in maven repository: + - B-D-I on maven-repo-helper + - Use mh_installpoms and mh_installjar + + -- Damien Raude-Morvan <[email protected]> Mon, 12 Apr 2010 12:42:16 +0200 + +libcommons-fileupload-java (1.2.1-3) unstable; urgency=low + + * (Build-)Depends on default-jdk. + * (Build-)Depends on libservlet2.4-java. + + -- Michael Koch <[email protected]> Wed, 16 Sep 2009 22:15:26 +0200 + +libcommons-fileupload-java (1.2.1-2) unstable; urgency=low + + [ Emmanuel Bourg ] + * Update of the URLs + * Rename Jakarta Commons to Apache Commons. + * debian/copyright: Switch to Apache License 2.0. Closes: #532889. + + [ Michael Koch ] + * Add '${misc:Depends}' to Depends of libcommons-fileupload-java. + * Converted debian/copyright to UTF-8. + * Move package to section 'java'. + * Update debhelper to >= 5. + * Update Standards-Version 3.8.3. + + -- Michael Koch <[email protected]> Sun, 06 Sep 2009 21:39:24 +0200 + +libcommons-fileupload-java (1.2.1-1) unstable; urgency=low + + [ Michael Koch ] + * New upstream release + * Updated Standards-Version to 3.7.3. + + [ Kumar Appaiah ] + * Update watch file. + * debian/control: + + Add Vcs-{Svn,Browser}. + + Add Homepage field. + + -- Michael Koch <[email protected]> Thu, 14 Feb 2008 17:41:57 +0100 + +libcommons-fileupload-java (1.2-2) unstable; urgency=low + + * Added Depends on libcommons-io-java. Closes: #439860. + + -- Michael Koch <[email protected]> Sat, 01 Sep 2007 22:19:03 +0200 + +libcommons-fileupload-java (1.2-1) unstable; urgency=low + + * New upstream release. Closes: #429638. + - added README.Debian with info about disabled portlet support + - updated patches/01-build-jar-without-test-fix.patch + * Use java-gcj-compat instead of kaffe. + * Renamed debian/patches/02_jikes_1.3.patch to + debian/patches/02_java13.patch and to make sure to have compatibility with + Java 1.3. + * Moved cdbs and debhelper from Build-Depends-Indep to Build-Depends. + * Fixed usage of Homepage: tag in package description. + * Removed Wolfgang and added myself to Uploads + * Updated Standards-Version. + * Removed ant-launcher.jar from explicit list of jars. + * Removed debian/libcommons-fileupload-java.links, debian/install and + debian/links and do the needed stuff in debian/rules. + + -- Michael Koch <[email protected]> Sat, 21 Jul 2007 13:08:32 +0200 + +libcommons-fileupload-java (1.0-14) unstable; urgency=low + + * kaffe compiler transition + * Bump debhelper version to fix linda error + * Removed version constraints already fulfilled by stable + * Formatted description + * Removed unused and wrong README.Debian + * Standards-Version 3.6.2 (no changes) + * Added myself to uploaders + + -- Wolfgang Baer <[email protected]> Wed, 1 Feb 2006 22:44:18 +0100 + +libcommons-fileupload-java (1.0-13) unstable; urgency=low + + * libant1.6-java to ant transition + + -- Arnaud Vandyck <[email protected]> Sat, 20 Aug 2005 19:52:56 +0200 + +libcommons-fileupload-java (1.0-12) unstable; urgency=low + + * debian/control (Build-Depends-Indep, Depends): changed the kaffe + version (closes: #302015) + * Standards-Version: 3.6.1, nothing to change + + -- Arnaud Vandyck <[email protected]> Tue, 5 Apr 2005 16:38:16 +0200 + +libcommons-fileupload-java (1.0-11) unstable; urgency=low + + * build with kaffe + * generate the javadoc + + -- Arnaud Vandyck <[email protected]> Wed, 2 Mar 2005 23:10:46 +0100 + +libcommons-fileupload-java (1.0-10) unstable; urgency=low + + * added a build-dep on libgnujaxp-java because sablevm does not embed + gnujaxp at the moment! (closes: #272387). + + -- Arnaud Vandyck <[email protected]> Tue, 28 Sep 2004 11:34:15 +0200 + +libcommons-fileupload-java (1.0-9) unstable; urgency=low + + * added a patch to force jikes to build against 1.3 (closes: #269254) + * sablevm is used to launch ant and jikes. + * no javadoc at the moment + + -- Arnaud Vandyck <[email protected]> Tue, 14 Sep 2004 13:25:23 +0200 + +libcommons-fileupload-java (1.0-8) unstable; urgency=low + + * debian/watch: added. + + -- Arnaud Vandyck <[email protected]> Sun, 15 Aug 2004 01:54:04 +0200 + +libcommons-fileupload-java (1.0-7) unstable; urgency=low + + * Now really move to main! + + -- Arnaud Vandyck <[email protected]> Sun, 25 Jul 2004 18:36:30 +0200 + +libcommons-fileupload-java (1.0-6) unstable; urgency=low + + * Move to main! Now that libservlet2.3-java is in main, this lib can + move to main + + -- Arnaud Vandyck <[email protected]> Sun, 25 Jul 2004 17:56:26 +0200 + +libcommons-fileupload-java (1.0-5) unstable; urgency=low + + * Removed the dependency to dpatch, update kaffe dependency to 1.1.3, + removed the junit dependency. I now use the cdbs simple-patchsys. + * debian/rules: clean up. + + -- Arnaud Vandyck <[email protected]> Sat, 24 Jan 2004 01:12:16 +0100 + +libcommons-fileupload-java (1.0-4) unstable; urgency=low + + * debian/links: changed the symlink. Thanks to Giuseppe Sacco (closes: + #226928). + + -- Arnaud Vandyck <[email protected]> Sat, 10 Jan 2004 01:05:23 +0100 + +libcommons-fileupload-java (1.0-3) unstable; urgency=low + + * debian/control (Maintainer) (Uploaders): Debian Java Maintainers is + now the maintainer and I added my debian email address to the + Uploaders field. + * debian/README.Debian: Added an explanation why in contrib. + + -- Arnaud Vandyck <[email protected]> Wed, 7 Jan 2004 17:33:53 +0100 + +libcommons-fileupload-java (1.0-2) unstable; urgency=low + + * Build system is now cdbs! the junit test is no more perform at the + moment, a patch has been applyied to suppress it from the build file + * junit is not needed when running (only for test at build time), kaffe + maybe used to run the library, libant-1.5-java is used to build + * I patched build.xml to remove entities because of a bug in kaffe-1.1.1 + (gnujaxp) so now it builds with kaffe... + * Waiting for libservlet2.3-java in main to be in main + + -- Arnaud Vandyck <[email protected]> Sun, 5 Oct 2003 01:58:49 +0200 + +libcommons-fileupload-java (1.0-1) unstable; urgency=low + + * New upstream release + * I do not need to patch build.xml anymore because upstream changed + it. I just have to override the libdir property in + debian/rules. Thanks to Martin Cooper. + * There is no more a libcommons-fileupload-java-doc package because it's + to small, so I merged it with the library (dist/doc/*). + * The jar is now in dist directory. + + -- Arnaud Vandyck <[email protected]> Mon, 30 Jun 2003 15:10:36 +0200 + +libcommons-fileupload-java (0.99beta1-2) unstable; urgency=low + + * Library compiled by jikes. Does not need JAVA_HOME anymore + * Typo in description + * Correct version dependency (beanutils) + * Correct the CLASSPATH (do not use version number of the jars) + + -- Arnaud Vandyck <[email protected]> Fri, 30 May 2003 10:18:57 +0200 + +libcommons-fileupload-java (0.99beta1-1) unstable; urgency=low + + * Initial Release. + + -- Arnaud Vandyck <[email protected]> Sun, 13 Apr 2003 18:45:44 +0200 + Deleted: tags/libcommons-fileupload-java/1.3-3/debian/compat =================================================================== --- trunk/libcommons-fileupload-java/debian/compat 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/compat 2013-12-03 10:07:18 UTC (rev 17552) @@ -1 +0,0 @@ -7 Copied: tags/libcommons-fileupload-java/1.3-3/debian/compat (from rev 17540, trunk/libcommons-fileupload-java/debian/compat) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/compat (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/compat 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1 @@ +9 Deleted: tags/libcommons-fileupload-java/1.3-3/debian/control =================================================================== --- trunk/libcommons-fileupload-java/debian/control 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/control 2013-12-03 10:07:18 UTC (rev 17552) @@ -1,41 +0,0 @@ -Source: libcommons-fileupload-java -Section: java -Priority: optional -Maintainer: Debian Java Maintainers <[email protected]> -Uploaders: Damien Raude-Morvan <[email protected]>, Emmanuel Bourg <[email protected]> -Build-Depends: debhelper (>= 7), cdbs, default-jdk, maven-debian-helper -Build-Depends-Indep: libservlet3.0-java, libcommons-io-java, libportlet-api-2.0-spec-java, - maven-repo-helper, libmaven-javadoc-plugin-java -Standards-Version: 3.9.4 -Vcs-Svn: svn://svn.debian.org/svn/pkg-java/trunk/libcommons-fileupload-java/ -Vcs-Browser: http://svn.debian.org/wsvn/pkg-java/trunk/libcommons-fileupload-java/ -Homepage: http://commons.apache.org/fileupload/ - -Package: libcommons-fileupload-java -Architecture: all -Depends: ${misc:Depends}, ${maven:Depends} -Recommends: ${maven:OptionalDepends} -Description: File upload capability to your servlets and web applications - The Commons FileUpload package makes it easy to add robust, high-performance, - file upload capability to your servlets and web applications. - . - FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File - Upload in HTML". That is, if an HTTP request is submitted using the POST - method, and with a content type of "multipart/form-data", then FileUpload - can parse that request, and make the results available in a manner easily - used by the caller. - -Package: libcommons-fileupload-java-doc -Architecture: all -Section: doc -Depends: ${misc:Depends}, ${maven:DocDepends} -Recommends: ${maven:DocOptionalDepends} -Suggests: libcommons-fileupload-java -Description: Javadoc API documentation for Commons FileUploads - FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File - Upload in HTML". That is, if an HTTP request is submitted using the POST - method, and with a content type of "multipart/form-data", then FileUpload - can parse that request, and make the results available in a manner easily - used by the caller. - . - This package contains Javadoc API documentation for Commons FileUpload. Copied: tags/libcommons-fileupload-java/1.3-3/debian/control (from rev 17546, trunk/libcommons-fileupload-java/debian/control) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/control (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/control 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,44 @@ +Source: libcommons-fileupload-java +Section: java +Priority: optional +Maintainer: Debian Java Maintainers <[email protected]> +Uploaders: Damien Raude-Morvan <[email protected]>, + Emmanuel Bourg <[email protected]> +Build-Depends: cdbs, debhelper (>= 9), default-jdk, maven-debian-helper +Build-Depends-Indep: libcommons-io-java, + libmaven-javadoc-plugin-java, + libportlet-api-2.0-spec-java, + libservlet3.0-java, + maven-repo-helper +Standards-Version: 3.9.5 +Vcs-Svn: svn://anonscm.debian.org/pkg-java/trunk/libcommons-fileupload-java/ +Vcs-Browser: http://anonscm.debian.org/viewvc/pkg-java/trunk/libcommons-fileupload-java/ +Homepage: http://commons.apache.org/fileupload/ + +Package: libcommons-fileupload-java +Architecture: all +Depends: ${misc:Depends}, libcommons-io-java +Description: File upload capability to your servlets and web applications + The Commons FileUpload package makes it easy to add robust, high-performance, + file upload capability to your servlets and web applications. + . + FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File + Upload in HTML". That is, if an HTTP request is submitted using the POST + method, and with a content type of "multipart/form-data", then FileUpload + can parse that request, and make the results available in a manner easily + used by the caller. + +Package: libcommons-fileupload-java-doc +Architecture: all +Section: doc +Depends: ${maven:DocDepends}, ${misc:Depends} +Recommends: ${maven:DocOptionalDepends} +Suggests: libcommons-fileupload-java +Description: Javadoc API documentation for Commons FileUploads + FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File + Upload in HTML". That is, if an HTTP request is submitted using the POST + method, and with a content type of "multipart/form-data", then FileUpload + can parse that request, and make the results available in a manner easily + used by the caller. + . + This package contains Javadoc API documentation for Commons FileUpload. Deleted: tags/libcommons-fileupload-java/1.3-3/debian/maven.properties =================================================================== --- trunk/libcommons-fileupload-java/debian/maven.properties 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/maven.properties 2013-12-03 10:07:18 UTC (rev 17552) @@ -1,4 +0,0 @@ -maven.test.skip = false -maven.compiler.source = 1.5 -maven.compiler.target = 1.5 -maven.compiler.encoding = ISO-8859-1 Copied: tags/libcommons-fileupload-java/1.3-3/debian/maven.properties (from rev 17543, trunk/libcommons-fileupload-java/debian/maven.properties) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/maven.properties (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/maven.properties 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,4 @@ +maven.test.skip = false +maven.compiler.source = 1.5 +maven.compiler.target = 1.5 +project.build.sourceEncoding = ISO-8859-1 Copied: tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch (from rev 17541, trunk/libcommons-fileupload-java/debian/patches/002_CVE-2013-2186.patch) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,37 @@ +Description: fix arbitrary file overwrite via poison null byte +Origin: upstream, http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java?r1=1460343&r2=1507048 +Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726601 +Bug-Novell: https://bugzilla.novell.com/show_bug.cgi?id=846174 +Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=974814 + +Index: libcommons-fileupload-java-1.3/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java +=================================================================== +--- libcommons-fileupload-java-1.3.orig/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java 2013-03-24 08:36:44.000000000 -0400 ++++ libcommons-fileupload-java-1.3/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java 2013-11-07 09:32:20.042865874 -0500 +@@ -656,6 +656,26 @@ + // read values + in.defaultReadObject(); + ++ /* One expected use of serialization is to migrate HTTP sessions ++ * containing a DiskFileItem between JVMs. Particularly if the JVMs are ++ * on different machines It is possible that the repository location is ++ * not valid so validate it. ++ */ ++ if (repository != null) { ++ if (repository.isDirectory()) { ++ // Check path for nulls ++ if (repository.getPath().contains("\0")) { ++ throw new IOException(format( ++ "The repository [%s] contains a null character", ++ repository.getPath())); ++ } ++ } else { ++ throw new IOException(format( ++ "The repository [%s] is not a directory", ++ repository.getAbsolutePath())); ++ } ++ } ++ + OutputStream output = getOutputStream(); + if (cachedContent != null) { + output.write(cachedContent); Deleted: tags/libcommons-fileupload-java/1.3-3/debian/patches/series =================================================================== --- trunk/libcommons-fileupload-java/debian/patches/series 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/patches/series 2013-12-03 10:07:18 UTC (rev 17552) @@ -1 +0,0 @@ -001_update-tests-for-servlet3-api.patch Copied: tags/libcommons-fileupload-java/1.3-3/debian/patches/series (from rev 17541, trunk/libcommons-fileupload-java/debian/patches/series) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/patches/series (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/patches/series 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,2 @@ +001_update-tests-for-servlet3-api.patch +002_CVE-2013-2186.patch Deleted: tags/libcommons-fileupload-java/1.3-3/debian/rules =================================================================== --- trunk/libcommons-fileupload-java/debian/rules 2013-12-02 17:23:20 UTC (rev 17533) +++ tags/libcommons-fileupload-java/1.3-3/debian/rules 2013-12-03 10:07:18 UTC (rev 17552) @@ -1,10 +0,0 @@ -#!/usr/bin/make -f -# debian/rules for Commons Fileupload (uses CDBS) - -include /usr/share/cdbs/1/rules/debhelper.mk -include /usr/share/cdbs/1/class/maven.mk - -JAVA_HOME_DIRS := /usr/lib/jvm/default-java - -get-orig-source: - uscan --force-download --rename Copied: tags/libcommons-fileupload-java/1.3-3/debian/rules (from rev 17544, trunk/libcommons-fileupload-java/debian/rules) =================================================================== --- tags/libcommons-fileupload-java/1.3-3/debian/rules (rev 0) +++ tags/libcommons-fileupload-java/1.3-3/debian/rules 2013-12-03 10:07:18 UTC (rev 17552) @@ -0,0 +1,12 @@ +#!/usr/bin/make -f +# debian/rules for Commons Fileupload (uses CDBS) + +include /usr/share/cdbs/1/rules/debhelper.mk +include /usr/share/cdbs/1/class/maven.mk + +JAVA_HOME_DIRS := /usr/lib/jvm/default-java + +DEB_INSTALL_CHANGELOGS_ALL := RELEASE-NOTES.txt + +get-orig-source: + uscan --force-download --rename _______________________________________________ pkg-java-commits mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-commits
