4 Commits

5 changed files with 12 additions and 50 deletions

View File

@@ -8,7 +8,7 @@
<property file="build.properties"/> <property file="build.properties"/>
<property name="build.finalName" value="commons-fileupload-1.6.0"/> <property name="build.finalName" value="commons-fileupload-1.5"/>
<property name="build.dir" value="target"/> <property name="build.dir" value="target"/>
<property name="build.outputDir" value="${build.dir}/classes"/> <property name="build.outputDir" value="${build.dir}/classes"/>
<property name="build.srcDir.0" value="src/main/java"/> <property name="build.srcDir.0" value="src/main/java"/>
@@ -220,21 +220,21 @@
<attribute name="Bundle-Name" value="Apache Commons FileUpload"/> <attribute name="Bundle-Name" value="Apache Commons FileUpload"/>
<attribute name="Bundle-SymbolicName" value="org.apache.commons.fileupload"/> <attribute name="Bundle-SymbolicName" value="org.apache.commons.fileupload"/>
<attribute name="Bundle-Vendor" value="The Apache Software Foundation"/> <attribute name="Bundle-Vendor" value="The Apache Software Foundation"/>
<attribute name="Bundle-Version" value="1.6.0"/> <attribute name="Bundle-Version" value="1.5.0"/>
<attribute name="DynamicImport-Package" value="javax.portlet"/> <attribute name="DynamicImport-Package" value="javax.portlet"/>
<attribute name="Export-Package" value="org.apache.commons.fileupload;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.disk;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.portlet;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.servlet;version=&quot;1.6.0&quot;,org.apache.commons.fileupload.util;version=&quot;1.6.0&quot;"/> <attribute name="Export-Package" value="org.apache.commons.fileupload;version=&quot;1.5&quot;,org.apache.commons.fileupload.disk;version=&quot;1.5&quot;,org.apache.commons.fileupload.portlet;version=&quot;1.5&quot;,org.apache.commons.fileupload.servlet;version=&quot;1.5&quot;,org.apache.commons.fileupload.util;version=&quot;1.5&quot;"/>
<attribute name="Implementation-Title" value="Apache Commons FileUpload"/> <attribute name="Implementation-Title" value="Apache Commons FileUpload"/>
<attribute name="Implementation-URL" value="http://commons.apache.org/proper/commons-fileupload/"/> <attribute name="Implementation-URL" value="http://commons.apache.org/proper/commons-fileupload/"/>
<attribute name="Implementation-Vendor" value="The Apache Software Foundation"/> <attribute name="Implementation-Vendor" value="The Apache Software Foundation"/>
<attribute name="Implementation-Vendor-Id" value="org.apache"/> <attribute name="Implementation-Vendor-Id" value="org.apache"/>
<attribute name="Implementation-Version" value="1.6.0"/> <attribute name="Implementation-Version" value="1.5"/>
<attribute name="Import-Package" value="javax.servlet,javax.servlet.http,org.apache.commons.io,org.apache.commons.io.output"/> <attribute name="Import-Package" value="javax.servlet,javax.servlet.http,org.apache.commons.io,org.apache.commons.io.output"/>
<attribute name="Include-Resource" value="META-INF/NOTICE.txt=NOTICE.txt,META-INF/LICENSE.txt=LICENSE.txt"/> <attribute name="Include-Resource" value="META-INF/NOTICE.txt=NOTICE.txt,META-INF/LICENSE.txt=LICENSE.txt"/>
<attribute name="Private-Package" value="org.apache.commons.fileupload.util.mime"/> <attribute name="Private-Package" value="org.apache.commons.fileupload.util.mime"/>
<attribute name="Require-Capability" value="osgi.ee;filter:=&quot;(&amp;(osgi.ee=JavaSE)(version=1.8))&quot;"/> <attribute name="Require-Capability" value="osgi.ee;filter:=&quot;(&amp;(osgi.ee=JavaSE)(version=1.8))&quot;"/>
<attribute name="Specification-Title" value="Apache Commons FileUpload"/> <attribute name="Specification-Title" value="Apache Commons FileUpload"/>
<attribute name="Specification-Vendor" value="The Apache Software Foundation"/> <attribute name="Specification-Vendor" value="The Apache Software Foundation"/>
<attribute name="Specification-Version" value="1.6"/> <attribute name="Specification-Version" value="1.5"/>
</manifest> </manifest>
</jar> </jar>
</target> </target>

View File

@@ -1,41 +1,3 @@
-------------------------------------------------------------------
Tue Jun 17 16:04:25 UTC 2025 - Fridrich Strba <fstrba@suse.com>
- Upgrade to upstream version 1.6.0
* Fixes bsc#1244657, CVE-2025-48976
* New features:
+ [1.x] Enable multipart/related on FileUpload #314.
+ Add JApiCmp to the default Maven goal.
+ Add partHeaderSizeMax, a new limit that sets a maximum number
of bytes for each individual multipart header. The default is
512 bytes.
* Fixed Bugs:
+ Replace use of Locale.ENGLISH with Locale.ROOT.
+ Remove unused exception from FileUploadBase.createItem(Map,
boolean).
+ Migrate from deprecated API in DiskFileItem.getOutputStream().
+ Use try-with-resources.
+ Port to Java 1.4 Throwable APIs (!).
+ Remove -nouses directive from maven-bundle-plugin. OSGi
package imports now state 'uses' definitions for package
imports, this doesn't affect JPMS (from
org.apache.commons:commons-parent:80).
+ DiskFileItem.getInputStream() now uses NIO.
+ Last statement in DiskFileItem.finalize() method should be a
call to super.finalize().
+ org.apache.commons.fileupload.FileUploadBase
.FileUploadIOException is now a proper Java 1.4-style
exception (propagates its cause to super).
+ Use java.util.Base64 instead of custom code.
* Changes:
+ Bump Java from 6 to 8.
+ Bump org.apache.commons:commons-parent from 62 to 84, upgrades
Doxia from 1 to 2.
+ Bump commons-io from 2.11.0 to 2.19.0.
+ Bump javax.servlet:servlet-api from 2.4 to 2.5.
+ Bump JUnit from junit:junit:4.13.2
org.junit.vintage:junit-vintage-engine from parent POM.
------------------------------------------------------------------- -------------------------------------------------------------------
Wed Oct 2 15:31:16 UTC 2024 - Fridrich Strba <fstrba@suse.com> Wed Oct 2 15:31:16 UTC 2024 - Fridrich Strba <fstrba@suse.com>

View File

@@ -1,7 +1,7 @@
# #
# spec file for package apache-commons-fileupload # spec file for package apache-commons-fileupload
# #
# Copyright (c) 2025 SUSE LLC # Copyright (c) 2024 SUSE LLC
# #
# All modifications and additions to the file contributed by third parties # All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed # remain the property of their copyright owners, unless otherwise agreed
@@ -20,13 +20,13 @@
%global short_name commons-%{base_name} %global short_name commons-%{base_name}
%bcond_without portlet %bcond_without portlet
Name: apache-%{short_name} Name: apache-%{short_name}
Version: 1.6.0 Version: 1.5
Release: 0 Release: 0
Summary: API to work with HTML file upload Summary: API to work with HTML file upload
License: Apache-2.0 License: Apache-2.0
Group: Development/Libraries/Java Group: Development/Libraries/Java
URL: https://commons.apache.org/fileupload/ URL: https://commons.apache.org/fileupload/
Source0: https://archive.apache.org/dist/commons/fileupload/source/commons-fileupload-%{version}-src.tar.gz Source0: http://archive.apache.org/dist/commons/fileupload/source/commons-fileupload-%{version}-src.tar.gz
Source1: %{name}-build.xml Source1: %{name}-build.xml
BuildRequires: ant BuildRequires: ant
BuildRequires: apache-commons-io BuildRequires: apache-commons-io
@@ -57,7 +57,7 @@ Group: Documentation/HTML
This package contains the API documentation for %{name}. This package contains the API documentation for %{name}.
%prep %prep
%setup -q -n %{short_name}-%{version}-src %setup -q -n commons-fileupload-%{version}-src
cp %{SOURCE1} build.xml cp %{SOURCE1} build.xml
sed -i 's/\r//' LICENSE.txt sed -i 's/\r//' LICENSE.txt
sed -i 's/\r//' NOTICE.txt sed -i 's/\r//' NOTICE.txt

View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bb2d61657c82d9f728d09be99fee0b665ef85428d98cabc45579037c831449ca
size 1108028

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:2e5b90da7bbf53529022fdbe020a072619fad7aed1f8efa8b7f9eb09081f0738
size 3412034