apache-commons-beanutils/apache-commons-beanutils.changes

172 lines
6.6 KiB
Plaintext

-------------------------------------------------------------------
Thu Feb 22 07:14:51 UTC 2024 - Fridrich Strba <fstrba@suse.com>
- Fix build with SLE12
-------------------------------------------------------------------
Tue Feb 20 10:24:45 UTC 2024 - Dominique Leuenberger <dimstar@opensuse.org>
- Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN.
-------------------------------------------------------------------
Tue Oct 31 08:36:54 UTC 2023 - Fridrich Strba <fstrba@suse.com>
- Clean and simplify the spec file
-------------------------------------------------------------------
Mon Oct 7 07:22:44 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Add aliases to account for the ephemeral commons-beanutils-core
and commons-beanutils-bean-collections split.
-------------------------------------------------------------------
Thu Oct 3 08:16:19 UTC 2019 - Fridrich Strba <fstrba@suse.com>
- Remove reference to parent pom, since it is not needed when not
building with maven
-------------------------------------------------------------------
Wed Aug 21 14:56:26 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
- Update to 1.9.4
* BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
* PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
* Added apache-commons-beanutils-fix-build-version.patch
-------------------------------------------------------------------
Tue Oct 23 17:30:33 UTC 2018 - Fridrich Strba <fstrba@suse.com>
- Cleanup the maven pom files installation
-------------------------------------------------------------------
Fri Sep 21 07:44:23 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>
- Fix the Source URLs to use mirrors properly
-------------------------------------------------------------------
Thu Sep 20 10:45:41 UTC 2018 - pmonrealgonzalez@suse.com
- Updated to 1.9.3
* This is a bug fix release, which also improves the tests for
building on Java 8.
* Note that Java 8 and later no longer support indexed bean
properties on java.util.List, only on arrays like String[].
(BEANUTILS-492). This affects PropertyUtils.getPropertyType()
and PropertyUtils.getPropertyDescriptor(); their javadoc have
therefore been updated to reflect this change in the JDK.
* Changes in this version include:
- Fixed Bugs:
* BEANUTILS-477: Changed log level in FluentPropertyBeanIntrospector
* BEANUTILS-492: Fixed exception when setting indexed properties
on DynaBeans.
* BEANUTILS-470: Precision lost when converting BigDecimal.
* BEANUTILS-465: Indexed List Setters fixed.
- Changes:
* BEANUTILS-433: Update dependency from JUnit 3.8.1 to 4.12.
* BEANUTILS-469: Update commons-logging from 1.1.1 to 1.2.
* BEANUTILS-474: FluentPropertyBeanIntrospector does not use the
same naming algorithm as DefaultBeanIntrospector.
* BEANUTILS-490: Update Java requirement from Java 5 to 6.
* BEANUTILS-482: Update commons-collections from 3.2.1 to 3.2.2
(CVE-2015-4852).
* BEANUTILS-490: Update java requirement to Java 6.
* BEANUTILS-492: IndexedPropertyDescriptor tests now pass on Java 8.
* BEANUTILS-495: DateConverterTestBase fails on M/d/yy in Java 9.
* BEANUTILS-496: testGetDescriptorInvalidBoolean fails on Java 9.
- Historical list of changes:
http://commons.apache.org/proper/commons-beanutils/changes-report.html
- Refreshed patch jdk9.patch for this version update
-------------------------------------------------------------------
Tue May 15 06:03:11 UTC 2018 - fstrba@suse.com
- Modified patch:
* jdk9.patch
+ Build with source and target 8 to prepare for a possible
removal of 1.6 compatibility
- Run fdupes on documentation
-------------------------------------------------------------------
Thu Sep 14 09:25:26 UTC 2017 - fstrba@suse.com
- Added patch:
* jdk9.patch
- Specify java source and target level 1.6 in order to allow
building with jdk9
-------------------------------------------------------------------
Thu Dec 4 18:53:24 UTC 2014 - p.drouand@gmail.com
- Remove java-devel dependency; not needed anymore
-------------------------------------------------------------------
Tue Jul 8 11:35:52 UTC 2014 - tchvatal@suse.com
- Cleanup bit with spec-cleaner
-------------------------------------------------------------------
Mon Jul 7 08:04:04 UTC 2014 - dmacvicar@suse.de
- update to 1.9.2
- CVE-2014-3540:
'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
* http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt
-------------------------------------------------------------------
Mon Apr 2 13:23:15 UTC 2012 - mvyskocil@suse.cz
- update to 1.8.3 and rename to apache- to follow the upstream
- fixes in this release
* memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
* BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
uses WeakHashMap is not thread-safe
* [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
ResultSetDynaClass and RowSetDynaClass
* and a lot of other like NPE in BeanUtilsBean.setProperty()
-------------------------------------------------------------------
Mon Sep 25 11:25:13 CEST 2006 - skh@suse.de
- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5
-------------------------------------------------------------------
Wed Jan 25 21:46:36 CET 2006 - mls@suse.de
- converted neededforbuild to BuildRequires
-------------------------------------------------------------------
Wed Jul 27 16:04:33 CEST 2005 - jsmeix@suse.de
- Adjustments in the spec file.
-------------------------------------------------------------------
Mon Jul 18 16:00:36 CEST 2005 - jsmeix@suse.de
- Current version 1.7.0 from JPackage.org
-------------------------------------------------------------------
Mon Feb 21 15:30:10 CET 2005 - skh@suse.de
- update to version 1.7.0
- don't use icecream
-------------------------------------------------------------------
Thu Sep 16 16:09:13 CEST 2004 - skh@suse.de
- Fix prerequires of javadoc subpackage
-------------------------------------------------------------------
Sun Sep 5 21:45:14 CEST 2004 - skh@suse.de
- Initial package created with version 1.6.1 (JPackage 1.5)