Change log : libspring-java package : Ubuntu

4.3.30-2

Published in oracular-release on 2024-04-29

Published in noble-release on 2023-10-23

Published in mantic-release on 2023-05-02

Deleted in mantic-proposed (Reason: Moved to mantic)

libspring-java (4.3.30-2) unstable; urgency=medium

  * Team upload.
  * Depend on libtomcat10-java instead of libtomcat9-java.
  * Add xmlbeans-4-ftbfs.patch and fix FTBFS with xmlbeans 4.
    (Closes: #1011689)
  * Ignore junit-bom and jboss-logging artifact.
  * Ignore org.eclipse.persistence:jakarta.persistence.
  * Install README.Debian.security and explain that libspring-java should be
    only used for building other Debian packages or in a secured local
    environment with trusted devices.

 -- Markus Koschany <email address hidden>  Mon, 27 Feb 2023 21:50:50 +0100

Available diffs

diff from 4.3.30-1 to 4.3.30-2 (2.2 KiB)

4.3.30-1

Superseded in mantic-release on 2023-05-02

Published in lunar-release on 2022-10-27

Obsolete in kinetic-release on 2023-11-13

Published in jammy-release on 2021-10-15

Obsolete in impish-release on 2022-07-23

Obsolete in hirsute-release on 2022-07-23

Deleted in hirsute-proposed (Reason: moved to Release)

libspring-java (4.3.30-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Fixes CVE-2020-5421: RFD Protection Bypass via jsessionid
      (Closes: #973381)
  * No longer build the deprecated classes dedicated to JRuby scripting.
    JRuby can still be used with the javax.script API (Closes: #979723)
  * Standards-Version updated to 4.5.1

 -- Emmanuel Bourg <email address hidden>  Sun, 10 Jan 2021 22:30:25 +0100

Available diffs

diff from 4.3.28-1 to 4.3.30-1 (49.1 KiB)

4.3.28-1

Superseded in hirsute-release on 2021-01-11

Obsolete in groovy-release on 2021-12-22

Deleted in groovy-proposed on 2022-07-23 (Reason: moved to Release)

libspring-java (4.3.28-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Updated the Maven rules to use the old propdeps-plugin
  * Depend on libhibernate-validator4-java instead of
    libhibernate-validator-java (Closes: #941685)
  * Standards-Version updated to 4.5.0

 -- Emmanuel Bourg <email address hidden>  Thu, 10 Sep 2020 15:30:54 +0200

Available diffs

diff from 4.3.22-4 to 4.3.28-1 (457.2 KiB)

4.3.22-4

Superseded in groovy-release on 2020-09-23

Published in focal-release on 2019-10-18

Obsolete in eoan-release on 2020-12-29

Obsolete in disco-release on 2020-07-14

Deleted in disco-proposed (Reason: moved to release)

libspring-java (4.3.22-4) unstable; urgency=medium

  * Team upload.
  * Restored the messaging and jms modules but no longer build the STOMP
    related classes depending on projectreactor (Closes: #925533)

 -- Emmanuel Bourg <email address hidden>  Sun, 07 Apr 2019 01:49:55 +0200

Available diffs

diff from 4.3.22-2 to 4.3.22-4 (2.8 KiB)
diff from 4.3.22-3 to 4.3.22-4 (2.4 KiB)

4.3.22-3

Superseded in disco-proposed on 2019-04-08

libspring-java (4.3.22-3) unstable; urgency=medium

  * Disable jasperreports support since it is RC-buggy.
  * Don’t build against libreactor-core-java since it depends on RC-buggy
    openhft.

 -- Andrej Shadura <email address hidden>  Sat, 09 Mar 2019 14:46:25 +0000

Available diffs

diff from 4.3.22-2 to 4.3.22-3 (1.6 KiB)

4.3.22-2

Superseded in disco-release on 2019-04-08

Deleted in disco-proposed on 2019-04-09 (Reason: moved to release)

libspring-java (4.3.22-2) unstable; urgency=medium

  * Team upload.
  * Update dependency on aspectj to be versioned (>= 1.9.2)
    Thank you to Matthias Klose for the bug report.  (Closes: #923554)
  * Update Homepage URL in debian/control to use https
  * Update Source URL in debian/copyright
  * Freshen debian/copyright year for upstream
  * Add a patch to use SOURCE_DATE_EPOCH to compute the copyright year
    that appears in JAR files META-INF.  This should help with build
    reproducibility.

 -- tony mancill <email address hidden>  Sun, 03 Mar 2019 20:35:23 -0800

Available diffs

diff from 4.3.22-1 to 4.3.22-2 (1.6 KiB)

4.3.22-1~18.04

Obsolete in cosmic-updates on 2020-07-13

Published in bionic-updates on 2019-04-16

Obsolete in cosmic-security on 2020-07-13

Published in bionic-security on 2019-04-16

Deleted in cosmic-proposed (Reason: moved to -updates)

Deleted in bionic-proposed (Reason: moved to -updates)

libspring-java (4.3.22-1~18.04) bionic; urgency=medium

  * Backport for OpenJDK 11. LP: #1814133.

Available diffs

diff from 4.3.19-1 (in Debian) to 4.3.22-1~18.04 (72.6 KiB)
diff from 4.3.14-1 (in Debian) to 4.3.22-1~18.04 (488.6 KiB)

4.3.22-1

Superseded in disco-release on 2019-03-04

Deleted in disco-proposed on 2019-03-06 (Reason: moved to release)

libspring-java (4.3.22-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Depend on librome-java (>= 1.6)
  * Depend on libapache-poi-java (>= 4.0)
  * Switch from libservlet3.1-java to lib{servlet,jsp,el,websocket}-api-java

 -- Emmanuel Bourg <email address hidden>  Tue, 22 Jan 2019 21:44:42 +0100

Available diffs

diff from 4.3.21-2 to 4.3.22-1 (23.2 KiB)

4.3.21-2

Superseded in disco-release on 2019-02-22

Deleted in disco-proposed on 2019-02-23 (Reason: moved to release)

libspring-java (4.3.21-2) unstable; urgency=medium

  * Team upload.
  * Added the missing dependencies to libspring-core-java

 -- Emmanuel Bourg <email address hidden>  Fri, 04 Jan 2019 01:51:05 +0100

Available diffs

diff from 4.3.21-1 to 4.3.21-2 (480 bytes)

4.3.21-1

Superseded in disco-release on 2019-01-04

Deleted in disco-proposed on 2019-01-05 (Reason: moved to release)

libspring-java (4.3.21-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Fixes CVE-2018-15756: DoS attack via range requests (Closes: #911786)
  * Fixed the compatibility with Java 11 (Closes: #910356)
  * Depend on libtomcat9-java instead of libtomcat8-java
  * Standards-Version updated to 4.3.0
  * Updated the homepage (Closes: #911160)

 -- Emmanuel Bourg <email address hidden>  Tue, 01 Jan 2019 11:48:44 +0100

Available diffs

diff from 4.3.14-1 to 4.3.21-1 (470.0 KiB)
diff from 4.3.19-1 to 4.3.21-1 (54.2 KiB)

4.3.19-1

Superseded in disco-proposed on 2019-01-01

Deleted in cosmic-proposed on 2019-01-02 (Reason: Moved to disco-proposed)

libspring-java (4.3.19-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Fixes CVE-2018-1270, CVE-2018-1272 and CVE-2018-1275 (Closes: #895114)
    - Refreshed the patches
    - Updated the Maven rules
  * Fixed the compatibility with the version of SnakeYAML in Debian
  * Replaced debian/orig-tar.sh with the File-Excluded field in debian/copyright
  * Standards-Version updated to 4.2.1
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <email address hidden>  Fri, 05 Oct 2018 14:19:52 +0200

4.3.14-1

Superseded in disco-release on 2019-01-01

Obsolete in cosmic-release on 2020-07-13

Published in bionic-release on 2018-02-10

Deleted in bionic-proposed (Reason: moved to release)

libspring-java (4.3.14-1) unstable; urgency=high

  * Team upload.
  * New upstream version 4.3.14.
    - Fix CVE-2018-1199: Security bypass with static resources.

 -- Markus Koschany <email address hidden>  Fri, 09 Feb 2018 22:57:48 +0100

Available diffs

diff from 4.3.13-2 to 4.3.14-1 (60.9 KiB)

4.3.13-2

Superseded in bionic-release on 2018-02-10

Deleted in bionic-proposed on 2018-02-11 (Reason: moved to release)

libspring-java (4.3.13-2) unstable; urgency=medium

  * Team upload.
  * Fix FTBFS and update 0041-servlet-api-compatibility.patch.
    Thanks to Hans Joachim Desserud for the report and patch. (Closes: #886164)
  * Use compat level 11.
  * Declare compliance with Debian Policy 4.1.3.

 -- Markus Koschany <email address hidden>  Sun, 04 Feb 2018 20:47:33 +0100

Available diffs

diff from 4.3.12-1 to 4.3.13-2 (157.1 KiB)
diff from 4.3.13-1 to 4.3.13-2 (1.4 KiB)

4.3.13-1

Superseded in bionic-proposed on 2018-02-05

libspring-java (4.3.13-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Replaced the dependency on glassfish-j2ee with the Geronimo spec jars
  * Fixed a build failure caused by the latest Tomcat 8 update
  * Standards-Version updated to 4.1.2

 -- Emmanuel Bourg <email address hidden>  Mon, 04 Dec 2017 19:35:23 +0100

Available diffs

diff from 4.3.12-1 to 4.3.13-1 (156.6 KiB)

4.3.12-1

Superseded in bionic-release on 2018-02-05

Deleted in bionic-proposed on 2018-02-06 (Reason: moved to release)

libspring-java (4.3.12-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Standards-Version updated to 4.1.1

 -- Emmanuel Bourg <email address hidden>  Wed, 25 Oct 2017 11:38:50 +0200

Available diffs

diff from 4.3.11-1 to 4.3.12-1 (106.1 KiB)

4.3.11-1

Superseded in bionic-release on 2017-11-03

Obsolete in artful-release on 2020-07-10

Deleted in artful-proposed on 2020-07-10 (Reason: moved to release)

libspring-java (4.3.11-1) unstable; urgency=medium

  * Team upload.

  [ Miguel Landaeta ]
  * Remove myself from uploaders list. (Closes: #871875)
  * Wrap and sort dependencies lists.
  * Simplify d/rules.
  * Update copyright info.

  [ Emmanuel Bourg ]
  * New upstream release
    - Refreshed the patches
  * Updated the Maven rule for testng
  * Standards-Version updated to 4.1.0

 -- Emmanuel Bourg <email address hidden>  Mon, 18 Sep 2017 20:13:58 +0200

Available diffs

diff from 4.3.10-1 to 4.3.11-1 (19.2 KiB)

4.3.10-1

Superseded in artful-release on 2017-09-20

Deleted in artful-proposed on 2017-09-21 (Reason: moved to release)

libspring-java (4.3.10-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Fixed a build failure with JRuby 9

 -- Emmanuel Bourg <email address hidden>  Mon, 24 Jul 2017 19:53:24 +0200

Available diffs

diff from 4.3.9-1 to 4.3.10-1 (44.2 KiB)

4.3.9-1

Superseded in artful-release on 2017-08-31

Deleted in artful-proposed on 2017-09-01 (Reason: moved to release)

libspring-java (4.3.9-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Removed the unused dependency on glassfish-toplink-essentials
  * Standards-Version updated to 4.0.0

 -- Emmanuel Bourg <email address hidden>  Tue, 04 Jul 2017 11:46:29 +0200

Available diffs

diff from 4.3.5-1 to 4.3.9-1 (312.3 KiB)

4.3.5-1

Superseded in artful-release on 2017-07-05

Obsolete in zesty-release on 2018-06-22

Deleted in zesty-proposed on 2018-06-22 (Reason: moved to release)

libspring-java (4.3.5-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Fixes CVE-2016-9878: Directory Traversal in ResourceServlet
      (Closes: #849167)
    - Refreshed the patches

 -- Emmanuel Bourg <email address hidden>  Fri, 23 Dec 2016 09:12:16 +0100

Available diffs

diff from 4.3.4-3 to 4.3.5-1 (111.0 KiB)

4.3.4-3

Superseded in zesty-release on 2016-12-23

Deleted in zesty-proposed on 2016-12-25 (Reason: moved to release)

libspring-java (4.3.4-3) unstable; urgency=medium

  * Team upload.
  * Depend on libtaglibs-standard-jstlel-java instead of libjstl1.1-java
  * No longer build spring-instrument-tomcat (obsolete) (Closes: #846683)

 -- Emmanuel Bourg <email address hidden>  Sat, 03 Dec 2016 23:01:27 +0100

Available diffs

diff from 4.3.4-2 to 4.3.4-3 (1.3 KiB)

4.3.4-2

Superseded in zesty-release on 2016-12-04

Deleted in zesty-proposed on 2016-12-05 (Reason: moved to release)

libspring-java (4.3.4-2) unstable; urgency=medium

  * Team upload.
  * Rebuild with gradle-debian-helper 1.4.4 to fix the optional dependencies
    in the poms (Closes: #844428)

 -- Emmanuel Bourg <email address hidden>  Wed, 16 Nov 2016 09:33:55 +0100

Available diffs

diff from 4.3.4-1 to 4.3.4-2 (596 bytes)

4.3.4-1

Superseded in zesty-release on 2016-11-16

Deleted in zesty-proposed on 2016-11-17 (Reason: moved to release)

libspring-java (4.3.4-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
  * Generate the pom files automatically with gradle-debian-helper 1.4
  * Switch to debhelper level 10

 -- Emmanuel Bourg <email address hidden>  Fri, 11 Nov 2016 23:32:01 +0100

Available diffs

diff from 4.3.3-1 to 4.3.4-1 (136.8 KiB)

4.3.3-1

Superseded in zesty-release on 2016-11-12

Obsolete in yakkety-release on 2018-01-23

Deleted in yakkety-proposed on 2018-01-23 (Reason: moved to release)

libspring-java (4.3.3-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Updated the Maven poms

 -- Emmanuel Bourg <email address hidden>  Mon, 26 Sep 2016 09:38:11 +0200

Available diffs

diff from 4.3.2-1 to 4.3.3-1 (123.6 KiB)

4.3.2-1

Superseded in yakkety-release on 2016-10-05

Deleted in yakkety-proposed on 2016-10-06 (Reason: moved to release)

libspring-java (4.3.2-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Updated the Maven poms
    - Removed the dependency on libaopalliance-java
    - Disabled the Caffeine support (not in Debian)
    - Added a dependency on libspring-aop-java to libspring-web-servlet-java
    - Depend on libprotobuf-java-format-java (>= 1.3)

 -- Emmanuel Bourg <email address hidden>  Wed, 03 Aug 2016 23:55:59 +0200

Available diffs

diff from 4.1.9-2 to 4.3.2-1 (3.1 MiB)
diff from 4.2.7-1 to 4.3.2-1 (757.2 KiB)

4.2.7-1

Superseded in yakkety-proposed on 2016-08-04

libspring-java (4.2.7-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Refreshed the patches
    - Updated the Maven poms
    - Disabled the Money API support for spring-context (not in Debian)
    - Disabled the Hibernate 5 support in spring-orm (not in Debian)
    - Disabled the OkHttp support in spring-web (not in Debian)
    - Disabled the HtmlUnit support in spring-test
    - New dependency on webjars-locator for spring-webmvc
    - New dependency on commons-pool2 for spring-aop
    - Depend on libreactor-core-java (>= 2.0.8)

 -- Emmanuel Bourg <email address hidden>  Wed, 03 Aug 2016 19:48:41 +0200

Available diffs

diff from 4.1.9-2 to 4.2.7-1 (2.6 MiB)

4.1.9-2

Superseded in yakkety-release on 2016-08-26

Deleted in yakkety-proposed on 2016-08-27 (Reason: moved to release)

libspring-java (4.1.9-2) unstable; urgency=medium

  * Team upload.
  * Transition to the Servlet API 3.1 (Closes: #830496)
  * Relocated the 3.x Maven artifacts to the generic 'debian' version
  * Refreshed the pom of spring-aspects, spring-framework-bom
    and spring-instrument-tomcat
  * Updated README.Debian

 -- Emmanuel Bourg <email address hidden>  Fri, 22 Jul 2016 17:17:12 +0200

Available diffs

diff from 4.0.9-3 to 4.1.9-2 (1.7 MiB)
diff from 4.1.9-1 to 4.1.9-2 (3.7 KiB)

4.1.9-1

Superseded in yakkety-proposed on 2016-07-22

libspring-java (4.1.9-1) unstable; urgency=medium

  * Team upload.
  * New upstream release
    - Fixes CVE-2015-3192: DoS Attack with XML Input (Closes: #796137)
    - Refreshed the patches
    - Updated the Maven poms
    - New binary package for the spring-messaging module
    - Switch Spring MVC to Tiles 3 only and drop Tiles 2 support
    - Patched Spring MVC to use the older Rome API in Debian
    - Depend on libquartz2-java instead of libquartz-java
    - New suggested dependency on libyaml-snake-java for libspring-beans-java
    - New suggested dependencies on libnetty-java, libprotobuf-java-format-java,
      libprotobuf-java, libjackson2-dataformat-xml-java for libspring-web-java
    - Ignore the non-free JSONassert dependency
    - Depend on libjetty9-extra-java instead of libjetty9-java

 -- Emmanuel Bourg <email address hidden>  Mon, 30 May 2016 21:14:36 +0200

Available diffs

diff from 4.0.9-4 to 4.1.9-1 (1.7 MiB)

4.0.9-4

Superseded in yakkety-proposed on 2016-05-31

libspring-java (4.0.9-4) unstable; urgency=medium

  * Team upload.
  * Depend on groovy instead of groovy2
  * Depend on libjetty9-java instead of libjetty8-java

 -- Emmanuel Bourg <email address hidden>  Thu, 19 May 2016 12:01:06 +0200

Available diffs

diff from 4.0.9-3 to 4.0.9-4 (991 bytes)

4.0.9-3

Superseded in yakkety-release on 2016-07-23

Deleted in yakkety-proposed on 2016-07-24 (Reason: moved to release)

libspring-java (4.0.9-3) unstable; urgency=medium

  * Team upload.
  * Restored the generic version of the Maven artifacts to '3.x'
  * Standards-Version updated to 3.9.8 (no changes)

 -- Emmanuel Bourg <email address hidden>  Sat, 09 Apr 2016 01:07:52 +0200

Available diffs

diff from 3.2.13-5 to 4.0.9-3 (4.3 MiB)

3.2.13-5

Superseded in yakkety-release on 2016-04-28

Published in xenial-release on 2016-01-31

Deleted in xenial-proposed (Reason: moved to release)

libspring-java (3.2.13-5) unstable; urgency=medium

  * Team upload.
  * Migrate to Groovy 2.x.

 -- Miguel Landaeta <email address hidden>  Thu, 10 Dec 2015 15:55:02 -0300

Available diffs

diff from 3.2.13-4 to 3.2.13-5 (647 bytes)

3.2.13-4

Superseded in xenial-release on 2016-01-31

Deleted in xenial-proposed on 2016-02-01 (Reason: moved to release)

libspring-java (3.2.13-4) unstable; urgency=medium

  * Team upload.
  * Fixed the build failure with Quartz 1.8.6
  * Fixed a compatibility issue with Gradle 2
  * Build with gradle-debian-helper
  * Removed the compatibility patches for Gradle < 1.7
  * Removed the dependency on the Servlet API from the binary packages

 -- Emmanuel Bourg <email address hidden>  Wed, 21 Oct 2015 23:32:19 +0200

Available diffs

diff from 3.2.13-3 to 3.2.13-4 (11.4 KiB)

3.2.13-3

Superseded in xenial-release on 2015-10-24

Obsolete in wily-release on 2018-01-22

Deleted in wily-proposed on 2018-01-22 (Reason: moved to release)

libspring-java (3.2.13-3) unstable; urgency=medium

  * Fix FTBFS with gradle 2.5.x:
    - Refresh d/p/0029-use-jruby-core.patch.
  * Add compatibility with recent tomcat7 releases:
    - Add d/p/0030-tomcat7-compatibility.patch.

 -- Miguel Landaeta <email address hidden>  Sun, 16 Aug 2015 19:35:43 +0200

Available diffs

diff from 3.0.6.RELEASE-17 to 3.2.13-3 (11.4 MiB)
diff from 3.2.13-2 to 3.2.13-3 (3.0 KiB)

3.2.13-2

Superseded in wily-proposed on 2015-08-17

libspring-java (3.2.13-2) unstable; urgency=medium

  * Use jruby-core Maven artifact instead jruby one. (Closes: #788768).

 -- Miguel Landaeta <email address hidden>  Sat, 20 Jun 2015 19:20:52 -0300

Available diffs

diff from 3.2.13-1 to 3.2.13-2 (1.4 KiB)

3.2.13-1

Superseded in wily-proposed on 2015-06-21

libspring-java (3.2.13-1) unstable; urgency=medium

  * Team upload.
  * Upload to unstable
  * New upstream release
    - Refreshed the patches

 -- Emmanuel Bourg <email address hidden>  Mon, 27 Apr 2015 23:11:12 +0200

3.0.6.RELEASE-17

Superseded in wily-release on 2015-08-31

Obsolete in vivid-release on 2018-01-18

Deleted in vivid-proposed on 2018-01-19 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-17) unstable; urgency=medium


  * Team upload.
  * Removed the libspring-web-struts-java package and dropped
    the build dependency on libstruts1.2-java

 -- Emmanuel Bourg <email address hidden>  Thu, 20 Nov 2014 11:42:48 +0100

Available diffs

diff from 3.0.6.RELEASE-16 to 3.0.6.RELEASE-17 (1.7 KiB)

3.0.6.RELEASE-16

Superseded in vivid-release on 2014-11-20

Deleted in vivid-proposed on 2014-11-26 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-16) unstable; urgency=medium


  * Team upload.
  * debian/rules: Fixed the JAVA_HOME variable (Closes: #766156)
  * debian/control:
    - Standards-Version updated to 3.9.6 (no changes)
    - Build depend on libmail-java instead of glassfish-mail
    - Updated the Homepage field

 -- Emmanuel Bourg <email address hidden>  Tue, 21 Oct 2014 10:45:06 +0200

Available diffs

diff from 3.0.6.RELEASE-14 to 3.0.6.RELEASE-16 (5.1 KiB)

3.0.6.RELEASE-14

Superseded in vivid-release on 2014-10-26

Obsolete in utopic-release on 2016-11-03

Deleted in utopic-proposed on 2016-11-03 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-14) unstable; urgency=high


  * Team upload.
  * Add patch to fix CVE-2014-0225. (Closes: #753470)
    - Thanks for Stephen Nelson.

 -- tony mancill <email address hidden>  Sat, 06 Sep 2014 08:27:26 -0700

Available diffs

diff from 3.0.6.RELEASE-13 to 3.0.6.RELEASE-14 (3.0 KiB)

3.0.6.RELEASE-13

Superseded in utopic-release on 2014-09-08

Published in trusty-release on 2014-03-27

Deleted in trusty-proposed (Reason: moved to release)

libspring-java (3.0.6.RELEASE-13) unstable; urgency=high


  * Fix CVE-2014-0054 and CVE-2014-1904. (Closes: #741604).

 -- Miguel Landaeta <email address hidden>  Mon, 24 Mar 2014 17:10:32 -0300

Available diffs

diff from 3.0.6.RELEASE-12 to 3.0.6.RELEASE-13 (4.2 KiB)

3.0.6.RELEASE-12

Superseded in trusty-release on 2014-03-27

Deleted in trusty-proposed on 2014-03-28 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-12) unstable; urgency=low


  * Fix an FTBFS bug due to a packaging change in
    libgeronimo-commonj-spec-java. (Closes: #738400).
  * Update my email address in Uploaders list.

 -- Miguel Landaeta <email address hidden>  Tue, 28 Jan 2014 23:50:15 -0300

Available diffs

diff from 3.0.6.RELEASE-11 to 3.0.6.RELEASE-12 (817 bytes)

3.0.6.RELEASE-11

Superseded in trusty-release on 2014-02-19

Deleted in trusty-proposed on 2014-02-20 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-11) unstable; urgency=high


  * Team upload.
  * Fix CVE-2013-6429 and CVE-2013-6430. (Closes: #735420)
    - New patches: CVE-2013-6429.patch and CVE-2013-6430.patch.
    - Spring MVC's SourceHttpMessageConverter also processed user provided XML
      and neither disabled XML external entities nor provided an option to
      disable them. SourceHttpMessageConverter has been modified to provide an
      option to control the processing of XML external entities and that
      processing is now disabled by default.
    - The JavaScriptUtils.javaScriptEscape() method did not escape all
      characters that are sensitive within either a JS single quoted string, JS
      double quoted string, or HTML script data context. In most cases this
      will result in an unexploitable parse error but in some cases it could
      result in an XSS vulnerability.

 -- Markus Koschany <email address hidden>  Fri, 24 Jan 2014 19:22:14 +0100

Available diffs

diff from 3.0.6.RELEASE-10 to 3.0.6.RELEASE-11 (7.3 KiB)

3.0.6.RELEASE-10

Superseded in trusty-release on 2014-01-27

Deleted in trusty-proposed on 2014-01-28 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-10) unstable; urgency=high


  * Team upload.
  * Fix CVE-2013-4152. (Closes: #720902).
   - New patch: Add-processExternalEntities-to-JAXB2Marshaller.patch.
   - Now by default external XML entities are not processed when unmarshalling.
     Processing of external entities will only be enabled/disabled when the
     source passed to the unmarshaller is a SAXSource or StreamSource. It has
     no effect for DOMSource or StAXSource instances.

 -- Markus Koschany <email address hidden>  Sun, 29 Dec 2013 13:24:03 +0100

Available diffs

diff from 3.0.6.RELEASE-9 to 3.0.6.RELEASE-10 (2.0 KiB)

3.0.6.RELEASE-9

Superseded in trusty-release on 2013-12-30

Deleted in trusty-proposed on 2014-01-01 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-9) unstable; urgency=low


  * Team upload.
  * Update debian/build-classpath and use jackson-mapper-asl.jar and
    jackson-core-asl.jar to adapt the package to the changes in
    libjackson-json-java.
  * Use compat level 9 and require debhelper >= 9.
  * Bump Standards-Version to 3.9.5, no changes.

 -- Markus Koschany <email address hidden>  Tue, 03 Dec 2013 10:38:45 +0100

Available diffs

diff from 3.0.6.RELEASE-8 to 3.0.6.RELEASE-9 (1.1 KiB)

3.0.6.RELEASE-8

Superseded in trusty-release on 2013-12-04

Deleted in trusty-proposed on 2013-12-05 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-8) unstable; urgency=low


  * Team upload.
  * Updated debian/watch to fetch the tarball from Github
  * Removed the dependency on backport-util-concurrent

 -- Emmanuel Bourg <email address hidden>  Wed, 25 Sep 2013 16:36:22 +0200

Available diffs

diff from 3.0.6.RELEASE-7 to 3.0.6.RELEASE-8 (3.5 KiB)

3.0.6.RELEASE-7

Superseded in trusty-release on 2013-10-22

Obsolete in saucy-release on 2015-04-24

Deleted in saucy-proposed on 2015-04-28 (Reason: moved to release)

libspring-java (3.0.6.RELEASE-7) unstable; urgency=low


  [ James Page ]
  * Transition package to use default java implementation: (Closes: #684151).
    - d/control: BD on default-jdk (>= 1:1.6).
  * d/patches/0011-java7-compat.patch: Compatibility patch for
    compilation with Java 7.
  * d/build-classpath: Explicitly add servlet-api-2.5.jar to classpath to
    ensure that build does not use incompatible servlet-api-3.0.

  [ Miguel Landaeta ]
  * Update copyright file and fix a lintian warning related to it.
  * Update watch file. Thanks to Bart Martens <email address hidden>.
  * Fix vcs-field-not-canonical lintian warnings.

  [ Emmanuel Bourg ]
  * Removed the deprecated DM-Upload-Allowed field.

 -- Miguel Landaeta <email address hidden>  Tue, 02 Jul 2013 23:40:46 -0300

Available diffs

diff from 3.0.6.RELEASE-6ubuntu1 (in Ubuntu) to 3.0.6.RELEASE-7 (1.9 KiB)

3.0.6.RELEASE-6ubuntu1

Superseded in saucy-release on 2013-07-11

Obsolete in raring-release on 2015-04-24

Obsolete in quantal-release on 2015-04-24

libspring-java (3.0.6.RELEASE-6ubuntu1) quantal; urgency=low

  * Transition package to use default java implementation:
    - d/control: BD on default-jdk (>= 1:1.6).
  * d/patches/0011-java7-compat.patch: Compatibility patch for
    compilation with Java 7.
  * d/build-classpath: Explicitly add servlet-api-2.5.jar to classpath to
    ensure that build does not use incompatible servlet-api-3.0.
 -- James Page <email address hidden>   Tue, 07 Aug 2012 13:22:03 +0100

Available diffs

diff from 3.0.6.RELEASE-6 (in Debian) to 3.0.6.RELEASE-6ubuntu1 (2.0 KiB)

3.0.6.RELEASE-6

Superseded in quantal-release on 2012-08-07

libspring-java (3.0.6.RELEASE-6) unstable; urgency=low


  * Add optional B-D on openjdk-7-jdk.
  * Update Vcs-* fields.
  * Bump Standards-Version to 3.9.3. No changes were required.

 -- Miguel Landaeta <email address hidden>  Wed, 20 Jun 2012 19:50:50 -0430

Available diffs

diff from 3.0.6.RELEASE-5 to 3.0.6.RELEASE-6 (996 bytes)

3.0.6.RELEASE-5

Superseded in quantal-release on 2012-06-25

Published in precise-release on 2012-03-19

libspring-java (3.0.6.RELEASE-5) unstable; urgency=low


  * Fix FTBFS by adding a patch that provides compatibility with Velocity 1.7.
    (Closes: #655812).

 -- Miguel Landaeta <email address hidden>  Sat, 14 Jan 2012 12:08:53 -0430

Available diffs

diff from 3.0.6.RELEASE-4 (in Ubuntu) to 3.0.6.RELEASE-5 (878 bytes)

3.0.6.RELEASE-4

Superseded in precise-release on 2012-03-19

libspring-java (3.0.6.RELEASE-4) unstable; urgency=low

  * Build-Depends and Recommends libapache-poi-java instead of
    libjakarta-poi-java

Available diffs

diff from 3.0.6.RELEASE-1 to 3.0.6.RELEASE-4 (2.0 KiB)

3.0.6.RELEASE-1

Superseded in precise-release on 2011-10-17

Obsolete in oneiric-release on 2015-04-24

libspring-java (3.0.6.RELEASE-1) unstable; urgency=low

  * New upstream release.
  * Refresh patches.
  * Remove unnecessary 0010_quartz_17.diff patch. It was merged at upstream.
  * Update copyright file.

Available diffs

diff from 3.0.5.RELEASE-3ubuntu1 to 3.0.6.RELEASE-1 (118.7 KiB)

3.0.5.RELEASE-3ubuntu1

Superseded in oneiric-release on 2011-09-09

libspring-java (3.0.5.RELEASE-3ubuntu1) oneiric; urgency=low

  * Fix FTBFS specific to Ubuntu (LP: #812895):
    - debian/control: depend on libcommons-fileupload-java-universe in order
      to gain support for Portlet API.
 -- James Page <email address hidden>   Tue, 19 Jul 2011 14:32:47 +0100

Available diffs

diff from 3.0.5.RELEASE-3 to 3.0.5.RELEASE-3ubuntu1 (1.2 KiB)

3.0.5.RELEASE-3

Superseded in oneiric-release on 2011-07-19

libspring-java (3.0.5.RELEASE-3) unstable; urgency=low

  * Upgrade d/maven.rules and d/maven.ignoreRules to include
    more information and be more compliant regarding dependencies
    in /usr/share/maven-repo/.
  * B-D and Suggests libaspectj-java instead of aspectj (ie. so no JRE
    in dependencies graph).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  14 Jun 2011 10:04:08 +0000

Available diffs

diff from 3.0.5.RELEASE-2 to 3.0.5.RELEASE-3 (1.6 KiB)

3.0.5.RELEASE-2

Superseded in oneiric-release on 2011-06-14

libspring-java (3.0.5.RELEASE-2) unstable; urgency=low

  [ Miguel Landaeta ]
  * Fix clean target in order to allow two builds in a row.

  [ Damien Raude-Morvan ]
  * Upload to unstable.
  * d/copyright: Update to latest DEP-5 format.

Ubuntulibspring-java package

Change log for libspring-java package in Ubuntu

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Available diffs

Ubuntu
libspring-java package