libcommons-compress-java (1.27.1-2) unstable; urgency=medium * Removed the runtime dependency on commons-lang3 -- Emmanuel Bourg Thu, 24 Oct 2024 19:41:30 +0200 libcommons-compress-java (1.27.1-1) unstable; urgency=medium * New upstream release - Refreshed the patches - Updated the Maven rules * Standards-Version updated to 4.7.0 -- Emmanuel Bourg Wed, 23 Oct 2024 18:33:44 +0200 libcommons-compress-java (1.25.0-1) unstable; urgency=medium * New upstream release - Refreshed the patches -- Emmanuel Bourg Wed, 03 Jan 2024 14:24:56 +0100 libcommons-compress-java (1.24.0-1) unstable; urgency=medium * Team upload * New upstream version 1.24.0 - CVE-2023-42503 (Closes: #1052065) * Refresh patches for new upstream release * Freshen years in debian/copyright -- tony mancill Sat, 16 Sep 2023 16:20:30 -0700 libcommons-compress-java (1.23.0-1) unstable; urgency=medium * New upstream release - Refreshed the patches - Updated the Maven rules * Standards-Version updated to 4.6.2 -- Emmanuel Bourg Sun, 11 Jun 2023 09:14:08 +0200 libcommons-compress-java (1.22-1) unstable; urgency=medium * New upstream release - Refreshed the patches - Updated the Maven rules * Standards-Version updated to 4.6.1 -- Emmanuel Bourg Thu, 15 Dec 2022 11:28:33 +0100 libcommons-compress-java (1.21-1) unstable; urgency=medium * Team upload. * New upstream version 1.21. - Fix CVE-2021-36090, CVE-2021-35517, CVE-2021-35516, CVE-2021-35515: Possible denial-of-service attacks. (Closes: #991041) * Declare compliance with Debian Policy 4.6.0. * Switch to debhelper-compat = 13. * Refresh the patches. * Disable harmony because it depends on obsolete libraries. -- Markus Koschany Mon, 20 Sep 2021 20:23:41 +0200 libcommons-compress-java (1.20-1) unstable; urgency=medium * Team upload. * New upstream version 1.20 * Refresh patches against new upstream version * Specify debhelper compat 12 via debhelper-compat dependency * Set "Rules-Requires-Root: no" in debian/control -- tony mancill Tue, 31 Mar 2020 19:41:01 -0700 libcommons-compress-java (1.19-1) unstable; urgency=medium * New upstream release - Removed the CVE-2019-12402 patch (fixed upstream) * Standards-Version updated to 4.5.0 -- Emmanuel Bourg Mon, 27 Jan 2020 12:35:59 +0100 libcommons-compress-java (1.18-3) unstable; urgency=medium * Team upload. * Add patch for CVE-2019-12402 (Debian: #939610) * Refresh whitespace in debian/patches * Bump Standards-Version to 4.4.0 * Use debhelper 12 -- tony mancill Sun, 15 Sep 2019 10:45:24 -0700 libcommons-compress-java (1.18-2) unstable; urgency=medium * Team upload. * Remove powermock from B-D. See #875358. * Declare compliance with Debian Policy 4.3.0. * Skip all the tests. -- Markus Koschany Fri, 01 Mar 2019 23:27:13 +0100 libcommons-compress-java (1.18-1) unstable; urgency=medium * Team upload. * New upstream version 1.18. - Fix CVE-2018-11771. When reading a specially crafted ZIP archive, the read method of Apache Commons Compress ZipArchiveInputStream can fail to return the correct EOF indication after the end of the stream has been reached. When combined with a java.io.InputStreamReader this can lead to an infinite stream, which can be used to mount a denial of service attack against services that use Compress' zip package. Thanks to Salvatore Bonaccorso for the report. (Closes: #906301) * Declare compliance with Debian Policy 4.2.0. -- Markus Koschany Wed, 22 Aug 2018 21:43:55 +0200 libcommons-compress-java (1.17-1) unstable; urgency=medium * Team upload. * New upstream release - Removed the CVE-2018-1324 patch (fixed upstream) - New build dependency on libmaven-antrun-plugin-java - Disabled Brotli support (dependency not in Debian) - Disabled Zstandard support (dependency not in Debian) * Rebuilt with Java 8 compatibility (Closes: #903774) * Standards-Version updated to 4.1.5 * Use salsa.debian.org Vcs-* URLs -- Emmanuel Bourg Mon, 16 Jul 2018 13:11:58 +0200 libcommons-compress-java (1.13-2) unstable; urgency=medium * Team upload. * Apply patch for CVE-2018-1324 (Closes: #893174) * Use debhelper 11 * Update Homepage * Update debian/watch to repack with xz compression * Drop get-orig-source target from debian/rules * Bump Standards-Version to 4.1.4 -- tony mancill Sun, 08 Apr 2018 20:58:50 -0700 libcommons-compress-java (1.13-1) unstable; urgency=medium * New upstream release -- Emmanuel Bourg Fri, 06 Jan 2017 00:59:52 +0100 libcommons-compress-java (1.12-1) unstable; urgency=medium * New upstream release - New build dependency on libpowermock-java - Ignore the test failures related to the powermock/cglib interaction * Switch to debhelper level 10 -- Emmanuel Bourg Wed, 21 Dec 2016 15:38:24 +0100 libcommons-compress-java (1.11-1) unstable; urgency=medium * New upstream release - Removed the Java 8 compatibility patch (fixed upstream) * Build with maven-debian-helper instead of ant. * Standards-Version updated to 3.9.8 (no changes) * Use secure Vcs-* URLs -- Emmanuel Bourg Wed, 20 Apr 2016 16:24:25 +0200 libcommons-compress-java (1.10-2) unstable; urgency=medium * Team upload. * Add patch from upstream to address test failure with Java 8. (Closes: #814583) * Standards-Version updated to 3.9.7 (no changes) -- tony mancill Mon, 15 Feb 2016 20:29:42 -0800 libcommons-compress-java (1.10-1) unstable; urgency=medium * New upstream release * Updated the OSGi metadata -- Emmanuel Bourg Mon, 31 Aug 2015 23:22:38 +0200 libcommons-compress-java (1.9-1) unstable; urgency=medium * New upstream release * Updated the OSGi metadata * Standards-Version updated to 3.9.6 (no changes) * Updated the Vcs-* fields -- Emmanuel Bourg Fri, 10 Oct 2014 16:58:50 +0200 libcommons-compress-java (1.8.1-1) unstable; urgency=medium * New upstream release * Removed 01-optional-xz-dependency.patch * Updated the OSGi metadata * Moved the package to Git -- Emmanuel Bourg Mon, 19 May 2014 18:13:11 +0200 libcommons-compress-java (1.8-2) unstable; urgency=medium * Patched the pom to Mark the dependency on org.tukaani:xz as optional (Closes: #741754) -- Emmanuel Bourg Tue, 25 Mar 2014 17:12:29 +0100 libcommons-compress-java (1.8-1) unstable; urgency=medium * New upstream release (Closes: #739655) * Updated the OSGi metadata * The dependency on libxz-java is now suggested and no longer required -- Emmanuel Bourg Thu, 13 Mar 2014 08:37:01 +0100 libcommons-compress-java (1.6-1) unstable; urgency=low * New upstream release * Updated Standards-Version to 3.9.5 (no changes) * Build depend on debhelper >= 9 * Removed the unused debian/orig-tar.sh script -- Emmanuel Bourg Sat, 02 Nov 2013 13:55:47 +0100 libcommons-compress-java (1.5-2) unstable; urgency=low * Team upload. [ Emmanuel Bourg ] * Use canonical URLs for the Vcs-* fields * Added the upstream changelog [ tony mancill ] * Apply patch to d/rules to include ant-junit4.jar on build classpath. - Thank you to James Page. (Closes: #712589) -- tony mancill Mon, 17 Jun 2013 15:32:55 -0700 libcommons-compress-java (1.5-1) unstable; urgency=low * Team upload. * Upload to unstable. -- tony mancill Fri, 17 May 2013 07:53:06 -0700 libcommons-compress-java (1.5-1~exp1) experimental; urgency=low * New upstream release. * Add Emmanuel Bourg to Uploaders. * d/control: Bump Standards-Version to 3.9.4 (no changes needed). * Update to the package description (Closes: #682169). [ Jakub Adam ] * Add xz.jar to manifest Class-Path. - fixes lintian-reported warning missing-classpath. * Ensure backwards compatible bytecode is built (Closes: #688118). * Add OSGi metadata into jar manifest. * Add Jakub Adam to Uploaders. -- Emmanuel Bourg Tue, 26 Mar 2013 19:42:09 +0100 libcommons-compress-java (1.4.1-2) unstable; urgency=low * Team upload. [ Miguel Landaeta ] * Promote dependency on libxz-java from Suggests to Depends. (Closes: #680874) [ Tony Mancill ] * Correct broken Vcs-Svn URL. -- Miguel Landaeta Sun, 08 Jul 2012 15:59:26 -0430 libcommons-compress-java (1.4.1-1) unstable; urgency=medium * Team upload. * New upstream release. CVE-2012-2098 is fixed. (Closes: #674448). * Replace B-D on junit with junit4. * Add B-D on libxz-java. * Fix clean target to allow twice in a row builds. -- Miguel Landaeta Sun, 17 Jun 2012 18:08:36 -0430 libcommons-compress-java (1.2-2) unstable; urgency=low * Team upload. [ James Page ] * Enablement of JUnit test suite (LP: #876413) (Closes: 646090): - d/build.xml: Provide targets to compile and execute test suite. - d/control: Add B-D's on junit and ant-optional to support testing. - d/rules: Add ant-junit and junit to DEB_JARS for testing. * d/copyright: Updated for revised field names. [ Damien Raude-Morvan ] * d/control: Bumped Standards-Version: 3.9.3, no changes. -- Damien Raude-Morvan Wed, 30 May 2012 01:26:41 +0200 libcommons-compress-java (1.2-1) unstable; urgency=low * New upstream release * Clean up Depends and Suggests fields. * Switch to source format 3.0. -- Torsten Werner Sun, 07 Aug 2011 01:56:15 +0200 libcommons-compress-java (1.0-1) unstable; urgency=low * First upstream release (Closes: #542603) * Update old sandbox URLs. * Convert debian/copyright to dep5 format and change license of debian/* to Apache-2.0. * Update get-orig-source target in debian/rules. * Switch to default-jdk. * Change Section: java. * Update Standards-Version: 3.8.3. * Use maven-repo-helper to start transition to Maven. -- Torsten Werner Sun, 20 Sep 2009 11:16:42 +0200 libcommons-compress-java (0~svn604876-1) unstable; urgency=low * Initial release (Closes: #456662) -- Torsten Werner Mon, 17 Dec 2007 15:17:09 +0100