1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124
|
h2database (1.4.197-4+deb10u1) buster-security; urgency=high
* Team upload.
* Security researchers of JFrog Security and Ismail Aydemir discovered two
remote code execution vulnerabilities in the H2 Java SQL database engine
which can be exploited through various attack vectors, most notably through
the H2 Console and by loading custom classes from remote servers through
JNDI. The H2 console is a developer tool and not required by any
reverse-dependency in Debian. It has been disabled in (old)stable
releases. Database developers are advised to use at least version
2.1.210-1, currently available in Debian unstable.
-- Markus Koschany <apo@debian.org> Mon, 14 Feb 2022 22:32:54 +0100
h2database (1.4.197-4) unstable; urgency=medium
* Depend on liblucene4.10-java instead of liblucene3-java
* Use salsa.debian.org Vcs-* URLs
-- Emmanuel Bourg <ebourg@apache.org> Tue, 04 Dec 2018 00:35:36 +0100
h2database (1.4.197-3) unstable; urgency=medium
* Team upload.
* Fix FTBFS with OpenJDK 11. Add TestCrashAPI.patch. (Closes: #913565)
* Declare compliance with Debian Policy 4.2.1.
-- Markus Koschany <apo@debian.org> Sun, 18 Nov 2018 20:02:45 +0100
h2database (1.4.197-2) unstable; urgency=medium
* Team upload.
* Removed the unused dependency on libequinox-osgi-java
-- Emmanuel Bourg <ebourg@apache.org> Tue, 21 Aug 2018 01:00:51 +0200
h2database (1.4.197-1) unstable; urgency=medium
* Team upload.
* New upstream version 1.4.197
- Fix compatibility issue with JTS 1.15. Thanks to Bas Couwenberg for the
report and patch. (Closes: #902787)
* Fix debian/watch file and use releases instead of tags.
* Refresh 01-use-jar-files-from-debian.patch
* Switch to compat level 11.
* Declare compliance with Debian Policy 4.2.0.
-- Markus Koschany <apo@debian.org> Tue, 14 Aug 2018 12:47:09 +0200
h2database (1.4.196-2) unstable; urgency=medium
* Fixed the build failure when maven-debian-helper is installed
(Closes: #875366)
* Standards-Version updated to 4.1.1
-- Emmanuel Bourg <ebourg@apache.org> Fri, 24 Nov 2017 12:53:48 +0100
h2database (1.4.196-1) unstable; urgency=medium
* New upstream release
- Refreshed the patches
-- Emmanuel Bourg <ebourg@apache.org> Tue, 20 Jun 2017 09:49:11 +0200
h2database (1.4.193-1) unstable; urgency=medium
* New upstream release
- Refreshed the patches
-- Emmanuel Bourg <ebourg@apache.org> Fri, 11 Nov 2016 22:00:48 +0100
h2database (1.4.192-3) unstable; urgency=medium
* Transition to the Servlet API 3.1
* Switch to debhelper level 10
-- Emmanuel Bourg <ebourg@apache.org> Wed, 26 Oct 2016 09:18:19 +0200
h2database (1.4.192-2) unstable; urgency=medium
* Fixed the build failure in offline mode
-- Emmanuel Bourg <ebourg@apache.org> Sat, 18 Jun 2016 23:41:19 +0200
h2database (1.4.192-1) unstable; urgency=medium
* New upstream release
- Refreshed the patches
* Team upload.
* Set the locale when generating the javadoc to improve the reproducibility
* Standards-Version updated to 3.9.8 (no changes)
* Use a secure Vcs-Git URL
-- Emmanuel Bourg <ebourg@apache.org> Fri, 03 Jun 2016 13:00:51 +0200
h2database (1.4.191-1) unstable; urgency=medium
* New upstream release
- Refreshed the patches
-- Emmanuel Bourg <ebourg@apache.org> Fri, 29 Jan 2016 22:30:08 +0100
h2database (1.4.190-1) unstable; urgency=medium
* New upstream release
- Refreshed the patches
- Depend on libservlet3.0-java (Closes: #801039)
* Watch and download the new releases from GitHub
-- Emmanuel Bourg <ebourg@apache.org> Mon, 21 Dec 2015 13:52:11 +0100
h2database (1.4.185-2) unstable; urgency=medium
* Team upload.
* Drop 04-jts-compatibility.patch. No longer needed with jts 1.13.
* Switch to libservlet3.1-java. (Closes: #801039)
-- Markus Koschany <apo@debian.org> Wed, 11 Nov 2015 18:15:35 +0100
h2database (1.4.185-1) unstable; urgency=low
* Initial release. (Closes: #607891)
-- Emmanuel Bourg <ebourg@apache.org> Tue, 17 Feb 2015 08:16:31 +0100
|