1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172
|
libxmlrpc3-java (3.1.3-9+deb10u1) buster-security; urgency=high
* Team upload.
* Fix CVE-2019-17570:
An untrusted deserialization was found in the
org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache
XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a
XML-RPC client causing it to execute arbitrary code.
Clients that expect to get server-side exceptions need to set the
enabledForExceptions property to true in order to process serialized
exception messages. (Closes: #949089)
-- Markus Koschany <apo@debian.org> Thu, 06 Feb 2020 17:57:54 +0100
libxmlrpc3-java (3.1.3-9) unstable; urgency=medium
* Team upload.
[ Emmanuel Bourg ]
* Removed the unused build dependency on libmaven-install-plugin-java
[ Markus Koschany ]
* Switch to compat level 10.
* Declare compliance with Debian Policy 4.1.2.
* Add jaxb-api.patch. Add jaxb-api as a dependency because
with Java 9 it is no longer on the default classpath.
Thanks to Chris West for the report. (Closes: #874662)
* Build-Depend on libjaxb-java.
-- Markus Koschany <apo@debian.org> Thu, 21 Dec 2017 12:41:51 +0100
libxmlrpc3-java (3.1.3-8) unstable; urgency=medium
* Transition to the Servlet API 3.1 (Closes: #801038)
* Build with the DH sequencer instead of CDBS
* Standards-Version updated to 3.9.8
* Moved the package to Git
-- Emmanuel Bourg <ebourg@apache.org> Thu, 23 Jun 2016 12:27:45 +0200
libxmlrpc3-java (3.1.3-7) unstable; urgency=medium
* Fixed a test failure with Java 8
* Standards-Version updated to 3.9.5 (no changes)
* Switch to debhelper level 9
-- Emmanuel Bourg <ebourg@apache.org> Tue, 13 May 2014 13:15:36 +0200
libxmlrpc3-java (3.1.3-6) unstable; urgency=low
* Removed the dependency on libjaxme-java
* Removed the dependency on libapache-pom-java
* Build with maven-debian-helper (Closes: #670223)
* Added a build dependency on libmaven-install-plugin-java
(required to build the aggregated Javadoc)
* jh_manifest is now used to add OSGi metadata to the manifests
* Removed the unused build steps for the old *-gcj packages
* Updated Standards-Version to 3.9.4 (no changes)
* Use canonical URLs for the Vcs-* fields
-- Emmanuel Bourg <ebourg@apache.org> Thu, 27 Jun 2013 13:47:56 +0200
libxmlrpc3-java (3.1.3-5) unstable; urgency=low
* Install maven metadata:
- d/control: Build-Depends on maven-repo-helper.
- d/control: Depends on libapache-pom-java.
- d/rules: Use mh_install to install JAR and POM.
-- Damien Raude-Morvan <drazzib@debian.org> Mon, 12 Dec 2011 23:27:49 +0100
libxmlrpc3-java (3.1.3-4) unstable; urgency=low
[ Jakub Adam ]
* Add OSGi metadata to JAR manifests
[ Damien Raude-Morvan ]
* Fix "java.lang.IllegalStateException: Failed to locate resource:
XmlRpcClient.properties": filter property file in d/build.xml (Closes:
#581487)
-- Damien Raude-Morvan <drazzib@debian.org> Sat, 19 Nov 2011 17:45:17 +0100
libxmlrpc3-java (3.1.3-3) unstable; urgency=low
[ Damien Raude-Morvan ]
* d/control: Drop Depends on any JRE as a Java library don't need to
depends on a runtime (Java Policy)
[ Torsten Werner ]
* Update Standards-Version: 3.9.2.
-- Torsten Werner <twerner@debian.org> Mon, 26 Sep 2011 21:11:07 +0200
libxmlrpc3-java (3.1.3-2) unstable; urgency=low
* Let 'maintainers' start with uppercase M.
* Remove Thomas from uploaders.
* Do no longer build the *-gcj packages. (Closes: #559967)
* Switch to source format 3.0.
-- Torsten Werner <twerner@debian.org> Sat, 10 Apr 2010 23:52:56 +0200
libxmlrpc3-java (3.1.3-1) unstable; urgency=low
* New upstream release.
* Bump Standards-Version: to 3.8.4 (no changes needed)
* Javadoc:
- Build-Depends on default-jdk-doc
- Link generated Javadoc with it
- libxmlrpc3-java-doc now Recommends default-jdk-doc
-- Damien Raude-Morvan <drazzib@debian.org> Sat, 20 Feb 2010 22:52:07 +0100
libxmlrpc3-java (3.1.2-1) unstable; urgency=low
* New upstream release.
* Build-Depends on debhelper (>= 7).
* Update Standards-Version: 3.8.3
- Add 'get-orig-source' target in debian/rules
* Add myself as Uploaders.
* Register API Javadoc with doc-base.
* Depends on libservlet-2.5-java instead of 2.4.
* Reword short description of *-gcj packages.
-- Damien Raude-Morvan <drazzib@debian.org> Sat, 03 Oct 2009 13:18:39 +0200
libxmlrpc3-java (3.1-3) unstable; urgency=low
* Add myself to Uploaders.
* Add missing Depends: ${misc:Depends}.
* Do no longer quote the full text of the Apache license.
* Change Section: java.
* Update Standards-Version: 3.8.2.
-- Torsten Werner <twerner@debian.org> Mon, 03 Aug 2009 22:20:42 +0200
libxmlrpc3-java (3.1-2) unstable; urgency=low
* Build-depends on default-jdk-builddep, and set JAVA_HOME to
/usr/lib/jvm/default-java. Closes: #477895.
* Remove unneeded gcj build-dependency.
* Add missing © in debian/copyright to fix lintian warning.
* Bump Standards-Version: to 3.7.3. No changes needed.
-- Thomas Girard <thomas.g.girard@free.fr> Sun, 27 Apr 2008 20:12:28 +0000
libxmlrpc3-java (3.1-1) unstable; urgency=low
* New upstream release.
* Add Homepage:, Vcs-Svn: and Vcs-Browser: control fields.
-- Thomas Girard <thomas.g.girard@free.fr> Wed, 24 Oct 2007 11:56:17 +0000
libxmlrpc3-java (3.0-2) unstable; urgency=low
* Add missing dependencies.
* Ajust sections: all packages belong to the libs section except for
libxmlrpc3-java-doc which is in doc.
* New packages:
o libxmlrpc3-common-java-gcj
o libxmlrpc3-client-java-gcj
o libxmlrpc3-server-java-gcj
-- Thomas Girard <thomas.g.girard@free.fr> Wed, 08 Aug 2007 15:32:41 +0200
libxmlrpc3-java (3.0-1) unstable; urgency=low
* Initial release. Closes: #430136.
-- Thomas Girard <thomas.g.girard@free.fr> Fri, 22 Jun 2007 17:27:08 +0200
|