commons-vfs (2.1-5) unstable; urgency=medium
* Team upload.
* Declare compliance with Debian Policy 4.7.2.
* Force at least a Java 8 build to fix CVE-2025-27553.
* Fix CVE-2025-27553: (Closes: #1101204)
Arnout Engelen discovered a Relative Path Traversal vulnerability in
Commons VFS, a Java library that provides a single API for accessing
various different file systems. A local or remote attacker may use this
flaw to access files and directories outside of a root folder.
-- Markus Koschany <apo@debian.org> Thu, 03 Apr 2025 03:38:38 +0200
commons-vfs (2.1-4) unstable; urgency=medium
* Team upload.
* Remove examples from libcommons-vfs-java (Closes: #1027700)
-- tony mancill <tmancill@debian.org> Mon, 02 Jan 2023 07:36:10 -0800
commons-vfs (2.1-3) unstable; urgency=medium
* Team upload.
* Drop libcommons-vfs-java-doc (Closes: #1027484)
* Freshen years in debian/copyright
* Update Homepage URL
* Update Vcs URLs to point to Salsa
* Remove get-orig-source target from debian/rules
* Use debhelper-compat (=13)
* Bump Standards-Version to 4.6.2
-- tony mancill <tmancill@debian.org> Sun, 01 Jan 2023 07:29:33 -0800
commons-vfs (2.1-2) unstable; urgency=medium
* Team upload.
* Fixed the build failure with Java 9 (Closes: #875353)
* Standards-Version updated to 4.1.3
* Switch to debhelper level 11
* Fixed the watch file
-- Emmanuel Bourg <ebourg@apache.org> Fri, 09 Mar 2018 12:16:40 +0100
commons-vfs (2.1-1) unstable; urgency=medium
* Team upload.
* New upstream release
- Refreshed the patches
- Disabled the new HDFS provider (missing dependencies)
- Depend on commons-collections4 instead of commons-collections3
- Ignore the new test dependencies
* Moved the package to Git
* Standards-Version updated to 3.9.8
-- Emmanuel Bourg <ebourg@apache.org> Thu, 07 Jul 2016 01:09:47 +0200
commons-vfs (2.0-7) unstable; urgency=medium
* Team upload.
* Fixed the build failure with commons-parent 39 (enables the OSGI metadata)
(Closes: #811259)
-- Emmanuel Bourg <ebourg@apache.org> Mon, 18 Jan 2016 08:59:11 +0100
commons-vfs (2.0-6) unstable; urgency=medium
* Team upload.
* Added the missing dependency on libjackrabbit-java (Closes: #808638)
-- Emmanuel Bourg <ebourg@apache.org> Wed, 30 Dec 2015 17:45:54 +0100
commons-vfs (2.0-5) unstable; urgency=medium
* Team upload.
* Depend on libcommons-net-java instead of libcommons-net2-java
(Closes: #800761)
* Build with the DH sequencer instead of CDBS
-- Emmanuel Bourg <ebourg@apache.org> Mon, 07 Dec 2015 11:34:18 +0100
commons-vfs (2.0-4) unstable; urgency=medium
* Team upload.
* Ignore the dependency on maven-scm (Closes: #797459)
* Standards-Version updated to 3.9.6 (no changes)
* Use canonical URLs for the Vcs-* fields
* Switch to debhelper level 9
* debian/copyright: Updated the Format URI
-- Emmanuel Bourg <ebourg@apache.org> Mon, 31 Aug 2015 16:07:05 +0200
commons-vfs (2.0-3) unstable; urgency=low
* Team upload.
* Explicitly state the encoding used to fix FTBFS with Java7.
-- Niels Thykier <niels@thykier.net> Wed, 20 Jun 2012 17:57:31 +0200
commons-vfs (2.0-2) unstable; urgency=low
* Update Standard-Version: 3.9.3.
* Install JAR into /usr/share/java (Closes: #667011).
* Drop --no-parent option and add Build-Depends on libcommons-parent-
java.
-- Damien Raude-Morvan <drazzib@debian.org> Sun, 08 Apr 2012 18:19:31 +0200
commons-vfs (2.0-1) unstable; urgency=low
* New upstream release:
- Drop all previous patches.
- d/control: Build-Depends on libcommons-net2-java, junit4,
libcommons-compress-java.
* Bump Standards-Version 3.9.2: no changes needed.
* d/copyright: Use DEP-5 format.
* Switch to Maven build system:
- d/patches/skip_examples.diff: Don't build examples module.
- d/patches/disable_webdav_provider.diff: Disable webdav provider.
- Drop B-D on ant, but add B-D on maven-debian-helper
- Use ${maven:Depends} and ${maven:OptionalDepends} for Depends
and Recommends.
* d/docs: Update for new release.
-- Damien Raude-Morvan <drazzib@debian.org> Sun, 11 Sep 2011 00:44:27 +0200
commons-vfs (1.0-6) unstable; urgency=low
* Team upload
[ Damien Raude-Morvan ]
* d/control: Drop Depends on any JRE as a Java library don't need to
depends on a runtime (Java Policy)
[ Torsten Werner ]
* Change 'maintainers' into 'Maintainers'.
* Update Standard-Version: 3.9.1.
* Switch to source format 3.0.
-- Torsten Werner <twerner@debian.org> Tue, 30 Aug 2011 16:56:07 +0200
commons-vfs (1.0-5) unstable; urgency=low
* debian/maven.rules:
- fix jdom groupId to org.jdom
- use 3.x release of commons-httpclient
- use 1.x release of commons-net
* Update my email address
* Bump debhelper version to >= 7
-- Damien Raude-Morvan <drazzib@debian.org> Sat, 12 Dec 2009 22:02:48 +0100
commons-vfs (1.0-4) unstable; urgency=low
* Set Maintainer field to Debian Java Team
* Add myself as Uploaders
* Add ${misc:Depends} in Depends field for debhelper
* Bump Standards-Version 3.8.3:
- Move libcommons-vfs-java to "java" section
- Add a README.source describing patch system
* Switch to Quilt patch system:
- Refresh all patchs
- Add B-D on quilt
- Include patchsys-quilt.mk in debian/rules
* New patch 02_no_home_dir.diff: don't try to create/copy files
in $HOME as many autobuilder won't have one
* Use default-jdk/jre:
- Depends on default-jre-headless instead of java-gcj-compat
- Build-Depends on default-jdk instead of default-jdk-builddep
because we don't build a native GCJ package.
* Maven POMs:
- Add a Build-Depends-Indep dependency on maven-repo-helper
- Use mh_installpom and mh_installjar to install the POM and the jar to the
Maven repository
* Move api documentation to /usr/share/doc/libcommons-vfs-java/api
-- Damien Raude-Morvan <drazzib@drazzib.com> Sun, 23 Aug 2009 00:52:26 +0200
commons-vfs (1.0-3) unstable; urgency=low
* debian/control:
- Build-Depend on default-jdk-builddep instead of java-gcj-compat-dev.
- Move default-jdk-builddep form B-D-I to B-D (needed for clean)
- Differentiate short description of -doc package
* debian/rules: Use default-java from default-jdk-builddep as JAVA_HOME
* Move examples (sample source code) to libcommons-vfs-java-doc package
-- Damien Raude-Morvan <drazzib@drazzib.com> Sun, 30 Nov 2008 13:11:05 +0100
commons-vfs (1.0-2) unstable; urgency=low
* debian/rules:
- Include examples/ in libcommons-vfs-java
- Install Javadoc API in /usr/share/doc/libcommons-vfs-java-doc
- Use CDBS DEB_SOURCE_PACKAGE and DEB_UPSTREAM_VERSION instead of using
dpkg-parsechangelog
- get-orig-source: use --force-download for uscan
- include simple-patchsys.mk rules before ant.mk class
* debian/control:
- Remove depends on java1-runtime as commons-vfs only works
with Java >= 1.4
* debian/copyright: Relicense debian packaging under BSD
* debian/dirs: Removed because dirs are created by dh_install
-- Damien Raude-Morvan <drazzib@drazzib.com> Sun, 10 Aug 2008 21:55:32 +0200
commons-vfs (1.0-1) unstable; urgency=low
* Initial release (closes: #238904).
-- Damien Raude-Morvan <drazzib@drazzib.com> Wed, 16 Jul 2008 21:56:34 +0200