libxmlrpc3-java (3.1.3-9+deb10u1) buster-security; urgency=high * Team upload. * Fix CVE-2019-17570: An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A malicious XML-RPC server could target a XML-RPC client causing it to execute arbitrary code. Clients that expect to get server-side exceptions need to set the enabledForExceptions property to true in order to process serialized exception messages. (Closes: #949089) -- Markus Koschany Thu, 06 Feb 2020 17:57:54 +0100 libxmlrpc3-java (3.1.3-9) unstable; urgency=medium * Team upload. [ Emmanuel Bourg ] * Removed the unused build dependency on libmaven-install-plugin-java [ Markus Koschany ] * Switch to compat level 10. * Declare compliance with Debian Policy 4.1.2. * Add jaxb-api.patch. Add jaxb-api as a dependency because with Java 9 it is no longer on the default classpath. Thanks to Chris West for the report. (Closes: #874662) * Build-Depend on libjaxb-java. -- Markus Koschany Thu, 21 Dec 2017 12:41:51 +0100 libxmlrpc3-java (3.1.3-8) unstable; urgency=medium * Transition to the Servlet API 3.1 (Closes: #801038) * Build with the DH sequencer instead of CDBS * Standards-Version updated to 3.9.8 * Moved the package to Git -- Emmanuel Bourg Thu, 23 Jun 2016 12:27:45 +0200 libxmlrpc3-java (3.1.3-7) unstable; urgency=medium * Fixed a test failure with Java 8 * Standards-Version updated to 3.9.5 (no changes) * Switch to debhelper level 9 -- Emmanuel Bourg Tue, 13 May 2014 13:15:36 +0200 libxmlrpc3-java (3.1.3-6) unstable; urgency=low * Removed the dependency on libjaxme-java * Removed the dependency on libapache-pom-java * Build with maven-debian-helper (Closes: #670223) * Added a build dependency on libmaven-install-plugin-java (required to build the aggregated Javadoc) * jh_manifest is now used to add OSGi metadata to the manifests * Removed the unused build steps for the old *-gcj packages * Updated Standards-Version to 3.9.4 (no changes) * Use canonical URLs for the Vcs-* fields -- Emmanuel Bourg Thu, 27 Jun 2013 13:47:56 +0200 libxmlrpc3-java (3.1.3-5) unstable; urgency=low * Install maven metadata: - d/control: Build-Depends on maven-repo-helper. - d/control: Depends on libapache-pom-java. - d/rules: Use mh_install to install JAR and POM. -- Damien Raude-Morvan Mon, 12 Dec 2011 23:27:49 +0100 libxmlrpc3-java (3.1.3-4) unstable; urgency=low [ Jakub Adam ] * Add OSGi metadata to JAR manifests [ Damien Raude-Morvan ] * Fix "java.lang.IllegalStateException: Failed to locate resource: XmlRpcClient.properties": filter property file in d/build.xml (Closes: #581487) -- Damien Raude-Morvan Sat, 19 Nov 2011 17:45:17 +0100 libxmlrpc3-java (3.1.3-3) unstable; urgency=low [ Damien Raude-Morvan ] * d/control: Drop Depends on any JRE as a Java library don't need to depends on a runtime (Java Policy) [ Torsten Werner ] * Update Standards-Version: 3.9.2. -- Torsten Werner Mon, 26 Sep 2011 21:11:07 +0200 libxmlrpc3-java (3.1.3-2) unstable; urgency=low * Let 'maintainers' start with uppercase M. * Remove Thomas from uploaders. * Do no longer build the *-gcj packages. (Closes: #559967) * Switch to source format 3.0. -- Torsten Werner Sat, 10 Apr 2010 23:52:56 +0200 libxmlrpc3-java (3.1.3-1) unstable; urgency=low * New upstream release. * Bump Standards-Version: to 3.8.4 (no changes needed) * Javadoc: - Build-Depends on default-jdk-doc - Link generated Javadoc with it - libxmlrpc3-java-doc now Recommends default-jdk-doc -- Damien Raude-Morvan Sat, 20 Feb 2010 22:52:07 +0100 libxmlrpc3-java (3.1.2-1) unstable; urgency=low * New upstream release. * Build-Depends on debhelper (>= 7). * Update Standards-Version: 3.8.3 - Add 'get-orig-source' target in debian/rules * Add myself as Uploaders. * Register API Javadoc with doc-base. * Depends on libservlet-2.5-java instead of 2.4. * Reword short description of *-gcj packages. -- Damien Raude-Morvan Sat, 03 Oct 2009 13:18:39 +0200 libxmlrpc3-java (3.1-3) unstable; urgency=low * Add myself to Uploaders. * Add missing Depends: ${misc:Depends}. * Do no longer quote the full text of the Apache license. * Change Section: java. * Update Standards-Version: 3.8.2. -- Torsten Werner Mon, 03 Aug 2009 22:20:42 +0200 libxmlrpc3-java (3.1-2) unstable; urgency=low * Build-depends on default-jdk-builddep, and set JAVA_HOME to /usr/lib/jvm/default-java. Closes: #477895. * Remove unneeded gcj build-dependency. * Add missing © in debian/copyright to fix lintian warning. * Bump Standards-Version: to 3.7.3. No changes needed. -- Thomas Girard Sun, 27 Apr 2008 20:12:28 +0000 libxmlrpc3-java (3.1-1) unstable; urgency=low * New upstream release. * Add Homepage:, Vcs-Svn: and Vcs-Browser: control fields. -- Thomas Girard Wed, 24 Oct 2007 11:56:17 +0000 libxmlrpc3-java (3.0-2) unstable; urgency=low * Add missing dependencies. * Ajust sections: all packages belong to the libs section except for libxmlrpc3-java-doc which is in doc. * New packages: o libxmlrpc3-common-java-gcj o libxmlrpc3-client-java-gcj o libxmlrpc3-server-java-gcj -- Thomas Girard Wed, 08 Aug 2007 15:32:41 +0200 libxmlrpc3-java (3.0-1) unstable; urgency=low * Initial release. Closes: #430136. -- Thomas Girard Fri, 22 Jun 2007 17:27:08 +0200