------------------------------------------------------------------- Thu Dec 4 07:21:34 UTC 2025 - Fridrich Strba - Upgrade to version 1.8.1 * Minimal patch to resolve CVE‐2025‐12183: + LZ4Factory.nativeInstance().fastDecompressor() returns the safe Java implementation instead + LZ4Factory.unsafeInstance() returns the safe Java implementation instead + LZ4Factory.unsafeInsecureInstance() and LZ4Factory.nativeInsecureInstance() are added to provide access to insecure but faster implementations. * User code does not need to be changed for this patch to be effective. - Removed patch: * 0001-remove-unsafe.patch + the code around unsafe got refactored - Modified patches: * 0002-remove-comments-from-templates.patch -> 0001-remove-comments-from-templates.patch * 0003-remove-cpptasks.patch -> 0002-remove-cpptasks.patch * 0004-remove-randomizedtesting-tests.patch -> 0003-remove-randomizedtesting-tests.patch + rediff - Added patch: * 0004-Undeclared-LZ4JavaSafeFastDecompressor.patch + LZ4JavaSafeFastDecompressor class used but never defined ------------------------------------------------------------------- Sun Sep 29 19:51:11 UTC 2024 - Fridrich Strba - Fix build after removal of the default %%{java_home} define ------------------------------------------------------------------- Wed Feb 21 14:44:11 UTC 2024 - Fridrich Strba - Use %patch -P N instead of deprecated %patchN. ------------------------------------------------------------------- Thu Oct 26 11:00:21 UTC 2023 - Fridrich Strba - Added patch: * lz4-sourcetarget.patch + build with source and target levels 8 ------------------------------------------------------------------- Sun Sep 17 05:33:03 UTC 2023 - Fridrich Strba - Added patch: * reproducible-build.patch + do not distribute useless build artifact that encodes object modification times + build with source and target 8 ------------------------------------------------------------------- Wed Sep 13 12:50:44 UTC 2023 - Fridrich Strba - Reproducible builds: produce reproducible manifest with bnd ------------------------------------------------------------------- Mon Dec 12 13:31:04 UTC 2022 - Anton Shvetz - Initial packaging with v1.8.0