[pkg-java] r17552 - in tags/libcommons-fileupload-java: . 1.3-3/debian 1.3-3/debian/patches

Emmanuel Bourg ebourg-guest at moszumanska.debian.org
Tue Dec 3 10:07:18 UTC 2013


Author: ebourg-guest
Date: 2013-12-03 10:07:18 +0000 (Tue, 03 Dec 2013)
New Revision: 17552

Added:
   tags/libcommons-fileupload-java/1.3-3/
   tags/libcommons-fileupload-java/1.3-3/debian/changelog
   tags/libcommons-fileupload-java/1.3-3/debian/compat
   tags/libcommons-fileupload-java/1.3-3/debian/control
   tags/libcommons-fileupload-java/1.3-3/debian/maven.properties
   tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch
   tags/libcommons-fileupload-java/1.3-3/debian/patches/series
   tags/libcommons-fileupload-java/1.3-3/debian/rules
Removed:
   tags/libcommons-fileupload-java/1.3-3/debian/changelog
   tags/libcommons-fileupload-java/1.3-3/debian/compat
   tags/libcommons-fileupload-java/1.3-3/debian/control
   tags/libcommons-fileupload-java/1.3-3/debian/maven.properties
   tags/libcommons-fileupload-java/1.3-3/debian/patches/series
   tags/libcommons-fileupload-java/1.3-3/debian/rules
Log:
[svn-buildpackage] Tagging libcommons-fileupload-java 1.3-3

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/changelog
===================================================================
--- trunk/libcommons-fileupload-java/debian/changelog	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/changelog	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1,259 +0,0 @@
-libcommons-fileupload-java (1.3-2) unstable; urgency=low
-
-  * Team upload.
-  * Upload to unstable.
-
- -- tony mancill <tmancill at debian.org>  Thu, 23 May 2013 21:15:43 -0700
-
-libcommons-fileupload-java (1.3-1) experimental; urgency=low
-
-  * Team upload
-  * New upstream release.
-  * Upgraded the dependency on the Servlet API (2.5 -> 3.0)
-  * Enabled the unit tests
-  * Removed Michael Koch from the uploaders list (Closes: #654055)
-  * Bump Standards-Version to 3.9.4 (no changes)
-  * Machine-readable debian/copyright file (DEP5)
-
- -- Emmanuel Bourg <ebourg at apache.org>  Tue, 23 Apr 2013 18:10:12 +0200
-
-libcommons-fileupload-java (1.2.2-1) unstable; urgency=low
-
-  * New upstream release.
-  * New libcommons-fileupload-java-doc package for Javadoc.
-  * Bump Standards-Version to 3.9.1:
-    - Add recommended get-orig-source target in d/rules.
-  * d/dirs: Remove, uneeded.
-  * Switch to maven-debian-helper for build:
-    - Drop all patches on old Ant build.
-    - Add maven-debian-helper to B-D.
-    - Drop ant from B-D.
-  * Don't Depends on a JRE (not requested anymore by Java Policy for
-    libraries packages).
-
- -- Damien Raude-Morvan <drazzib at debian.org>  Wed, 04 Aug 2010 13:57:04 +0200
-
-libcommons-fileupload-java (1.2.1-5) unstable; urgency=low
-
-  * (Build-)Depend on libservlet2.5-java instead of libservlet2.4-java
-
- -- Thierry Carrez <thierry.carrez at ubuntu.com>  Fri, 11 Jun 2010 15:19:56 +0200
-
-libcommons-fileupload-java (1.2.1-4) unstable; urgency=low
-
-  [ Thierry Carrez ]
-  * Minimal dependency on default-jre-headless | java2-runtime-headless
-  * debian/ant.properties: Force Java2 code to match dependency
-
-  [ Damien Raude-Morvan ]
-  * Remove Arnaud from Uploaders.
-  * Add myself to Uploaders.
-  * Bump Standards-Version to 3.8.4: no changes needed
-  * Bump debhelper to >= 7
-  * Remove version criteria from cdbs B-D (even stable match version)
-  * Enable portlet support:
-   - Remove debian/patches/04_disable-portlet.patch
-   - Add B-D-I on libportlet-api-2.0-spec-java
-   - Remove debian/README.Debian
-   (Closes: #577474)
-  * Convert to source format 3.0 (quilt)
-   - Refresh all patches
-   - Add DEP3 headers to patches
-  * Register in maven repository:
-   - B-D-I on maven-repo-helper
-   - Use mh_installpoms and mh_installjar
-
- -- Damien Raude-Morvan <drazzib at debian.org>  Mon, 12 Apr 2010 12:42:16 +0200
-
-libcommons-fileupload-java (1.2.1-3) unstable; urgency=low
-
-  * (Build-)Depends on default-jdk.
-  * (Build-)Depends on libservlet2.4-java.
-
- -- Michael Koch <konqueror at gmx.de>  Wed, 16 Sep 2009 22:15:26 +0200
-
-libcommons-fileupload-java (1.2.1-2) unstable; urgency=low
-
-  [ Emmanuel Bourg ]
-  * Update of the URLs
-  * Rename Jakarta Commons to Apache Commons.
-  * debian/copyright: Switch to Apache License 2.0. Closes: #532889.
-
-  [ Michael Koch ]
-  * Add '${misc:Depends}' to Depends of libcommons-fileupload-java.
-  * Converted debian/copyright to UTF-8.
-  * Move package to section 'java'.
-  * Update debhelper to >= 5.
-  * Update Standards-Version 3.8.3.
-
- -- Michael Koch <konqueror at gmx.de>  Sun, 06 Sep 2009 21:39:24 +0200
-
-libcommons-fileupload-java (1.2.1-1) unstable; urgency=low
-
-  [ Michael Koch ]
-  * New upstream release
-  * Updated Standards-Version to 3.7.3.
-
-  [ Kumar Appaiah ]
-  * Update watch file.
-  * debian/control:
-    + Add Vcs-{Svn,Browser}.
-    + Add Homepage field.
-
- -- Michael Koch <konqueror at gmx.de>  Thu, 14 Feb 2008 17:41:57 +0100
-
-libcommons-fileupload-java (1.2-2) unstable; urgency=low
-
-  * Added Depends on libcommons-io-java. Closes: #439860.
-
- -- Michael Koch <konqueror at gmx.de>  Sat, 01 Sep 2007 22:19:03 +0200
-
-libcommons-fileupload-java (1.2-1) unstable; urgency=low
-
-  * New upstream release. Closes: #429638.
-    - added README.Debian with info about disabled portlet support
-    - updated patches/01-build-jar-without-test-fix.patch
-  * Use java-gcj-compat instead of kaffe.
-  * Renamed debian/patches/02_jikes_1.3.patch to
-    debian/patches/02_java13.patch and to make sure to have compatibility with
-    Java 1.3.
-  * Moved cdbs and debhelper from Build-Depends-Indep to Build-Depends.
-  * Fixed usage of Homepage: tag in package description.
-  * Removed Wolfgang and added myself to Uploads
-  * Updated Standards-Version.
-  * Removed ant-launcher.jar from explicit list of jars.
-  * Removed debian/libcommons-fileupload-java.links, debian/install and
-    debian/links and do the needed stuff in debian/rules.
-
- -- Michael Koch <konqueror at gmx.de>  Sat, 21 Jul 2007 13:08:32 +0200
-
-libcommons-fileupload-java (1.0-14) unstable; urgency=low
-
-  * kaffe compiler transition 
-  * Bump debhelper version to fix linda error
-  * Removed version constraints already fulfilled by stable
-  * Formatted description
-  * Removed unused and wrong README.Debian
-  * Standards-Version 3.6.2 (no changes)
-  * Added myself to uploaders
-
- -- Wolfgang Baer <WBaer at gmx.de>  Wed,  1 Feb 2006 22:44:18 +0100
-
-libcommons-fileupload-java (1.0-13) unstable; urgency=low
-
-  * libant1.6-java to ant transition
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sat, 20 Aug 2005 19:52:56 +0200
-
-libcommons-fileupload-java (1.0-12) unstable; urgency=low
-
-  * debian/control (Build-Depends-Indep, Depends): changed the kaffe
-    version (closes: #302015)
-  * Standards-Version: 3.6.1, nothing to change
-
- -- Arnaud Vandyck <avdyk at debian.org>  Tue,  5 Apr 2005 16:38:16 +0200
-
-libcommons-fileupload-java (1.0-11) unstable; urgency=low
-
-  * build with kaffe
-  * generate the javadoc
-
- -- Arnaud Vandyck <avdyk at debian.org>  Wed,  2 Mar 2005 23:10:46 +0100
-
-libcommons-fileupload-java (1.0-10) unstable; urgency=low
-
-  * added a build-dep on libgnujaxp-java because sablevm does not embed
-    gnujaxp at the moment! (closes: #272387).
-
- -- Arnaud Vandyck <avdyk at debian.org>  Tue, 28 Sep 2004 11:34:15 +0200
-
-libcommons-fileupload-java (1.0-9) unstable; urgency=low
-
-  * added a patch to force jikes to build against 1.3 (closes: #269254)
-  * sablevm is used to launch ant and jikes.
-  * no javadoc at the moment
-
- -- Arnaud Vandyck <avdyk at debian.org>  Tue, 14 Sep 2004 13:25:23 +0200
-
-libcommons-fileupload-java (1.0-8) unstable; urgency=low
-
-  * debian/watch: added.
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sun, 15 Aug 2004 01:54:04 +0200
-
-libcommons-fileupload-java (1.0-7) unstable; urgency=low
-
-  * Now really move to main!
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sun, 25 Jul 2004 18:36:30 +0200
-
-libcommons-fileupload-java (1.0-6) unstable; urgency=low
-
-  * Move to main! Now that libservlet2.3-java is in main, this lib can
-    move to main
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sun, 25 Jul 2004 17:56:26 +0200
-
-libcommons-fileupload-java (1.0-5) unstable; urgency=low
-
-  * Removed the dependency to dpatch, update kaffe dependency to 1.1.3,
-    removed the junit dependency. I now use the cdbs simple-patchsys.
-  * debian/rules: clean up.
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sat, 24 Jan 2004 01:12:16 +0100
-
-libcommons-fileupload-java (1.0-4) unstable; urgency=low
-
-  * debian/links: changed the symlink. Thanks to Giuseppe Sacco (closes:
-    #226928).
-
- -- Arnaud Vandyck <avdyk at debian.org>  Sat, 10 Jan 2004 01:05:23 +0100
-
-libcommons-fileupload-java (1.0-3) unstable; urgency=low
-
-  * debian/control (Maintainer) (Uploaders): Debian Java Maintainers is
-    now the maintainer and I added my debian email address to the
-    Uploaders field.
-  * debian/README.Debian: Added an explanation why in contrib.
-
- -- Arnaud Vandyck <avdyk at debian.org>  Wed,  7 Jan 2004 17:33:53 +0100
-
-libcommons-fileupload-java (1.0-2) unstable; urgency=low
-
-  * Build system is now cdbs! the junit test is no more perform at the
-    moment, a patch has been applyied to suppress it from the build file
-  * junit is not needed when running (only for test at build time), kaffe
-    maybe used to run the library, libant-1.5-java is used to build
-  * I patched build.xml to remove entities because of a bug in kaffe-1.1.1
-    (gnujaxp) so now it builds with kaffe...
-  * Waiting for libservlet2.3-java in main to be in main
-
- -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Sun,  5 Oct 2003 01:58:49 +0200
-
-libcommons-fileupload-java (1.0-1) unstable; urgency=low
-
-  * New upstream release
-  * I do not need to patch build.xml anymore because upstream changed
-    it. I just have to override the libdir property in
-    debian/rules. Thanks to Martin Cooper.
-  * There is no more a libcommons-fileupload-java-doc package because it's
-    to small, so I merged it with the library (dist/doc/*).
-  * The jar is now in dist directory.
-
- -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Mon, 30 Jun 2003 15:10:36 +0200
-
-libcommons-fileupload-java (0.99beta1-2) unstable; urgency=low
-
-  * Library compiled by jikes. Does not need JAVA_HOME anymore
-  * Typo in description
-  * Correct version dependency (beanutils)
-  * Correct the CLASSPATH (do not use version number of the jars)
-  
- -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Fri, 30 May 2003 10:18:57 +0200
-
-libcommons-fileupload-java (0.99beta1-1) unstable; urgency=low
-
-  * Initial Release.
-
- -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Sun, 13 Apr 2003 18:45:44 +0200
-

Copied: tags/libcommons-fileupload-java/1.3-3/debian/changelog (from rev 17547, trunk/libcommons-fileupload-java/debian/changelog)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/changelog	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/changelog	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,284 @@
+libcommons-fileupload-java (1.3-3) unstable; urgency=low
+
+  * Set the project.build.sourceEncoding property to fix a test failure
+    (Closes: #730970)
+  * Removed the Servlet and the Portlet APIs from the runtime dependencies
+    since they are provided by the Servlet container.
+  * Install the upstream changelog
+  * debian/control:
+    - Standards-Version updated to 3.9.5 (no changes)
+    - Use canonical URLs for the Vcs-* fields
+  * Switch to debhelper level 9
+
+ -- Emmanuel Bourg <ebourg at apache.org>  Tue, 03 Dec 2013 08:35:15 +0100
+
+libcommons-fileupload-java (1.3-2.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Add CVE-2013-2186.patch patch.
+    CVE-2013-2186: Arbitrary file upload via deserialization. Properly validate
+    repository in org.apache.commons.fileupload.disk.DiskFileItem.
+    Thanks to Marc Deslauriers <marc.deslauriers at ubuntu.com> for
+    providing the debdiff. (Closes: #726601)
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Fri, 15 Nov 2013 15:04:17 +0100
+
+libcommons-fileupload-java (1.3-2) unstable; urgency=low
+
+  * Team upload.
+  * Upload to unstable.
+
+ -- tony mancill <tmancill at debian.org>  Thu, 23 May 2013 21:15:43 -0700
+
+libcommons-fileupload-java (1.3-1) experimental; urgency=low
+
+  * Team upload
+  * New upstream release.
+  * Upgraded the dependency on the Servlet API (2.5 -> 3.0)
+  * Enabled the unit tests
+  * Removed Michael Koch from the uploaders list (Closes: #654055)
+  * Bump Standards-Version to 3.9.4 (no changes)
+  * Machine-readable debian/copyright file (DEP5)
+
+ -- Emmanuel Bourg <ebourg at apache.org>  Tue, 23 Apr 2013 18:10:12 +0200
+
+libcommons-fileupload-java (1.2.2-1) unstable; urgency=low
+
+  * New upstream release.
+  * New libcommons-fileupload-java-doc package for Javadoc.
+  * Bump Standards-Version to 3.9.1:
+    - Add recommended get-orig-source target in d/rules.
+  * d/dirs: Remove, uneeded.
+  * Switch to maven-debian-helper for build:
+    - Drop all patches on old Ant build.
+    - Add maven-debian-helper to B-D.
+    - Drop ant from B-D.
+  * Don't Depends on a JRE (not requested anymore by Java Policy for
+    libraries packages).
+
+ -- Damien Raude-Morvan <drazzib at debian.org>  Wed, 04 Aug 2010 13:57:04 +0200
+
+libcommons-fileupload-java (1.2.1-5) unstable; urgency=low
+
+  * (Build-)Depend on libservlet2.5-java instead of libservlet2.4-java
+
+ -- Thierry Carrez <thierry.carrez at ubuntu.com>  Fri, 11 Jun 2010 15:19:56 +0200
+
+libcommons-fileupload-java (1.2.1-4) unstable; urgency=low
+
+  [ Thierry Carrez ]
+  * Minimal dependency on default-jre-headless | java2-runtime-headless
+  * debian/ant.properties: Force Java2 code to match dependency
+
+  [ Damien Raude-Morvan ]
+  * Remove Arnaud from Uploaders.
+  * Add myself to Uploaders.
+  * Bump Standards-Version to 3.8.4: no changes needed
+  * Bump debhelper to >= 7
+  * Remove version criteria from cdbs B-D (even stable match version)
+  * Enable portlet support:
+   - Remove debian/patches/04_disable-portlet.patch
+   - Add B-D-I on libportlet-api-2.0-spec-java
+   - Remove debian/README.Debian
+   (Closes: #577474)
+  * Convert to source format 3.0 (quilt)
+   - Refresh all patches
+   - Add DEP3 headers to patches
+  * Register in maven repository:
+   - B-D-I on maven-repo-helper
+   - Use mh_installpoms and mh_installjar
+
+ -- Damien Raude-Morvan <drazzib at debian.org>  Mon, 12 Apr 2010 12:42:16 +0200
+
+libcommons-fileupload-java (1.2.1-3) unstable; urgency=low
+
+  * (Build-)Depends on default-jdk.
+  * (Build-)Depends on libservlet2.4-java.
+
+ -- Michael Koch <konqueror at gmx.de>  Wed, 16 Sep 2009 22:15:26 +0200
+
+libcommons-fileupload-java (1.2.1-2) unstable; urgency=low
+
+  [ Emmanuel Bourg ]
+  * Update of the URLs
+  * Rename Jakarta Commons to Apache Commons.
+  * debian/copyright: Switch to Apache License 2.0. Closes: #532889.
+
+  [ Michael Koch ]
+  * Add '${misc:Depends}' to Depends of libcommons-fileupload-java.
+  * Converted debian/copyright to UTF-8.
+  * Move package to section 'java'.
+  * Update debhelper to >= 5.
+  * Update Standards-Version 3.8.3.
+
+ -- Michael Koch <konqueror at gmx.de>  Sun, 06 Sep 2009 21:39:24 +0200
+
+libcommons-fileupload-java (1.2.1-1) unstable; urgency=low
+
+  [ Michael Koch ]
+  * New upstream release
+  * Updated Standards-Version to 3.7.3.
+
+  [ Kumar Appaiah ]
+  * Update watch file.
+  * debian/control:
+    + Add Vcs-{Svn,Browser}.
+    + Add Homepage field.
+
+ -- Michael Koch <konqueror at gmx.de>  Thu, 14 Feb 2008 17:41:57 +0100
+
+libcommons-fileupload-java (1.2-2) unstable; urgency=low
+
+  * Added Depends on libcommons-io-java. Closes: #439860.
+
+ -- Michael Koch <konqueror at gmx.de>  Sat, 01 Sep 2007 22:19:03 +0200
+
+libcommons-fileupload-java (1.2-1) unstable; urgency=low
+
+  * New upstream release. Closes: #429638.
+    - added README.Debian with info about disabled portlet support
+    - updated patches/01-build-jar-without-test-fix.patch
+  * Use java-gcj-compat instead of kaffe.
+  * Renamed debian/patches/02_jikes_1.3.patch to
+    debian/patches/02_java13.patch and to make sure to have compatibility with
+    Java 1.3.
+  * Moved cdbs and debhelper from Build-Depends-Indep to Build-Depends.
+  * Fixed usage of Homepage: tag in package description.
+  * Removed Wolfgang and added myself to Uploads
+  * Updated Standards-Version.
+  * Removed ant-launcher.jar from explicit list of jars.
+  * Removed debian/libcommons-fileupload-java.links, debian/install and
+    debian/links and do the needed stuff in debian/rules.
+
+ -- Michael Koch <konqueror at gmx.de>  Sat, 21 Jul 2007 13:08:32 +0200
+
+libcommons-fileupload-java (1.0-14) unstable; urgency=low
+
+  * kaffe compiler transition 
+  * Bump debhelper version to fix linda error
+  * Removed version constraints already fulfilled by stable
+  * Formatted description
+  * Removed unused and wrong README.Debian
+  * Standards-Version 3.6.2 (no changes)
+  * Added myself to uploaders
+
+ -- Wolfgang Baer <WBaer at gmx.de>  Wed,  1 Feb 2006 22:44:18 +0100
+
+libcommons-fileupload-java (1.0-13) unstable; urgency=low
+
+  * libant1.6-java to ant transition
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sat, 20 Aug 2005 19:52:56 +0200
+
+libcommons-fileupload-java (1.0-12) unstable; urgency=low
+
+  * debian/control (Build-Depends-Indep, Depends): changed the kaffe
+    version (closes: #302015)
+  * Standards-Version: 3.6.1, nothing to change
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Tue,  5 Apr 2005 16:38:16 +0200
+
+libcommons-fileupload-java (1.0-11) unstable; urgency=low
+
+  * build with kaffe
+  * generate the javadoc
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Wed,  2 Mar 2005 23:10:46 +0100
+
+libcommons-fileupload-java (1.0-10) unstable; urgency=low
+
+  * added a build-dep on libgnujaxp-java because sablevm does not embed
+    gnujaxp at the moment! (closes: #272387).
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Tue, 28 Sep 2004 11:34:15 +0200
+
+libcommons-fileupload-java (1.0-9) unstable; urgency=low
+
+  * added a patch to force jikes to build against 1.3 (closes: #269254)
+  * sablevm is used to launch ant and jikes.
+  * no javadoc at the moment
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Tue, 14 Sep 2004 13:25:23 +0200
+
+libcommons-fileupload-java (1.0-8) unstable; urgency=low
+
+  * debian/watch: added.
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sun, 15 Aug 2004 01:54:04 +0200
+
+libcommons-fileupload-java (1.0-7) unstable; urgency=low
+
+  * Now really move to main!
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sun, 25 Jul 2004 18:36:30 +0200
+
+libcommons-fileupload-java (1.0-6) unstable; urgency=low
+
+  * Move to main! Now that libservlet2.3-java is in main, this lib can
+    move to main
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sun, 25 Jul 2004 17:56:26 +0200
+
+libcommons-fileupload-java (1.0-5) unstable; urgency=low
+
+  * Removed the dependency to dpatch, update kaffe dependency to 1.1.3,
+    removed the junit dependency. I now use the cdbs simple-patchsys.
+  * debian/rules: clean up.
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sat, 24 Jan 2004 01:12:16 +0100
+
+libcommons-fileupload-java (1.0-4) unstable; urgency=low
+
+  * debian/links: changed the symlink. Thanks to Giuseppe Sacco (closes:
+    #226928).
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Sat, 10 Jan 2004 01:05:23 +0100
+
+libcommons-fileupload-java (1.0-3) unstable; urgency=low
+
+  * debian/control (Maintainer) (Uploaders): Debian Java Maintainers is
+    now the maintainer and I added my debian email address to the
+    Uploaders field.
+  * debian/README.Debian: Added an explanation why in contrib.
+
+ -- Arnaud Vandyck <avdyk at debian.org>  Wed,  7 Jan 2004 17:33:53 +0100
+
+libcommons-fileupload-java (1.0-2) unstable; urgency=low
+
+  * Build system is now cdbs! the junit test is no more perform at the
+    moment, a patch has been applyied to suppress it from the build file
+  * junit is not needed when running (only for test at build time), kaffe
+    maybe used to run the library, libant-1.5-java is used to build
+  * I patched build.xml to remove entities because of a bug in kaffe-1.1.1
+    (gnujaxp) so now it builds with kaffe...
+  * Waiting for libservlet2.3-java in main to be in main
+
+ -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Sun,  5 Oct 2003 01:58:49 +0200
+
+libcommons-fileupload-java (1.0-1) unstable; urgency=low
+
+  * New upstream release
+  * I do not need to patch build.xml anymore because upstream changed
+    it. I just have to override the libdir property in
+    debian/rules. Thanks to Martin Cooper.
+  * There is no more a libcommons-fileupload-java-doc package because it's
+    to small, so I merged it with the library (dist/doc/*).
+  * The jar is now in dist directory.
+
+ -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Mon, 30 Jun 2003 15:10:36 +0200
+
+libcommons-fileupload-java (0.99beta1-2) unstable; urgency=low
+
+  * Library compiled by jikes. Does not need JAVA_HOME anymore
+  * Typo in description
+  * Correct version dependency (beanutils)
+  * Correct the CLASSPATH (do not use version number of the jars)
+  
+ -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Fri, 30 May 2003 10:18:57 +0200
+
+libcommons-fileupload-java (0.99beta1-1) unstable; urgency=low
+
+  * Initial Release.
+
+ -- Arnaud Vandyck <arnaud.vandyck at ulg.ac.be>  Sun, 13 Apr 2003 18:45:44 +0200
+

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/compat
===================================================================
--- trunk/libcommons-fileupload-java/debian/compat	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/compat	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1 +0,0 @@
-7

Copied: tags/libcommons-fileupload-java/1.3-3/debian/compat (from rev 17540, trunk/libcommons-fileupload-java/debian/compat)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/compat	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/compat	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1 @@
+9

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/control
===================================================================
--- trunk/libcommons-fileupload-java/debian/control	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/control	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1,41 +0,0 @@
-Source: libcommons-fileupload-java
-Section: java
-Priority: optional
-Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
-Uploaders: Damien Raude-Morvan <drazzib at debian.org>, Emmanuel Bourg <ebourg at apache.org>
-Build-Depends: debhelper (>= 7), cdbs, default-jdk, maven-debian-helper
-Build-Depends-Indep: libservlet3.0-java, libcommons-io-java, libportlet-api-2.0-spec-java,
- maven-repo-helper, libmaven-javadoc-plugin-java
-Standards-Version: 3.9.4
-Vcs-Svn: svn://svn.debian.org/svn/pkg-java/trunk/libcommons-fileupload-java/
-Vcs-Browser: http://svn.debian.org/wsvn/pkg-java/trunk/libcommons-fileupload-java/
-Homepage: http://commons.apache.org/fileupload/
-
-Package: libcommons-fileupload-java
-Architecture: all
-Depends: ${misc:Depends}, ${maven:Depends}
-Recommends: ${maven:OptionalDepends}
-Description: File upload capability to your servlets and web applications
- The Commons FileUpload package makes it easy to add robust, high-performance,
- file upload capability to your servlets and web applications.
- .
- FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File 
- Upload in HTML". That is, if an HTTP request is submitted using the POST 
- method, and with a content type of "multipart/form-data", then FileUpload
- can parse that request, and make the results available in a manner easily
- used by the caller.
-
-Package: libcommons-fileupload-java-doc
-Architecture: all
-Section: doc
-Depends: ${misc:Depends}, ${maven:DocDepends}
-Recommends: ${maven:DocOptionalDepends}
-Suggests: libcommons-fileupload-java
-Description: Javadoc API documentation for Commons FileUploads
- FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File
- Upload in HTML". That is, if an HTTP request is submitted using the POST
- method, and with a content type of "multipart/form-data", then FileUpload
- can parse that request, and make the results available in a manner easily
- used by the caller.
- .
- This package contains Javadoc API documentation for Commons FileUpload.

Copied: tags/libcommons-fileupload-java/1.3-3/debian/control (from rev 17546, trunk/libcommons-fileupload-java/debian/control)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/control	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/control	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,44 @@
+Source: libcommons-fileupload-java
+Section: java
+Priority: optional
+Maintainer: Debian Java Maintainers <pkg-java-maintainers at lists.alioth.debian.org>
+Uploaders: Damien Raude-Morvan <drazzib at debian.org>,
+           Emmanuel Bourg <ebourg at apache.org>
+Build-Depends: cdbs, debhelper (>= 9), default-jdk, maven-debian-helper
+Build-Depends-Indep: libcommons-io-java,
+                     libmaven-javadoc-plugin-java,
+                     libportlet-api-2.0-spec-java,
+                     libservlet3.0-java,
+                     maven-repo-helper
+Standards-Version: 3.9.5
+Vcs-Svn: svn://anonscm.debian.org/pkg-java/trunk/libcommons-fileupload-java/
+Vcs-Browser: http://anonscm.debian.org/viewvc/pkg-java/trunk/libcommons-fileupload-java/
+Homepage: http://commons.apache.org/fileupload/
+
+Package: libcommons-fileupload-java
+Architecture: all
+Depends: ${misc:Depends}, libcommons-io-java
+Description: File upload capability to your servlets and web applications
+ The Commons FileUpload package makes it easy to add robust, high-performance,
+ file upload capability to your servlets and web applications.
+ .
+ FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File
+ Upload in HTML". That is, if an HTTP request is submitted using the POST
+ method, and with a content type of "multipart/form-data", then FileUpload
+ can parse that request, and make the results available in a manner easily
+ used by the caller.
+
+Package: libcommons-fileupload-java-doc
+Architecture: all
+Section: doc
+Depends: ${maven:DocDepends}, ${misc:Depends}
+Recommends: ${maven:DocOptionalDepends}
+Suggests: libcommons-fileupload-java
+Description: Javadoc API documentation for Commons FileUploads
+ FileUpload parses HTTP requests which conform to RFC 1867, "Form-based File
+ Upload in HTML". That is, if an HTTP request is submitted using the POST
+ method, and with a content type of "multipart/form-data", then FileUpload
+ can parse that request, and make the results available in a manner easily
+ used by the caller.
+ .
+ This package contains Javadoc API documentation for Commons FileUpload.

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/maven.properties
===================================================================
--- trunk/libcommons-fileupload-java/debian/maven.properties	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/maven.properties	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1,4 +0,0 @@
-maven.test.skip = false
-maven.compiler.source = 1.5
-maven.compiler.target = 1.5
-maven.compiler.encoding = ISO-8859-1

Copied: tags/libcommons-fileupload-java/1.3-3/debian/maven.properties (from rev 17543, trunk/libcommons-fileupload-java/debian/maven.properties)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/maven.properties	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/maven.properties	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,4 @@
+maven.test.skip = false
+maven.compiler.source = 1.5
+maven.compiler.target = 1.5
+project.build.sourceEncoding = ISO-8859-1

Copied: tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch (from rev 17541, trunk/libcommons-fileupload-java/debian/patches/002_CVE-2013-2186.patch)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/patches/002_CVE-2013-2186.patch	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,37 @@
+Description: fix arbitrary file overwrite via poison null byte
+Origin: upstream, http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java?r1=1460343&r2=1507048
+Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726601
+Bug-Novell: https://bugzilla.novell.com/show_bug.cgi?id=846174
+Bug-RedHat: https://bugzilla.redhat.com/show_bug.cgi?id=974814
+
+Index: libcommons-fileupload-java-1.3/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java
+===================================================================
+--- libcommons-fileupload-java-1.3.orig/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java	2013-03-24 08:36:44.000000000 -0400
++++ libcommons-fileupload-java-1.3/src/main/java/org/apache/commons/fileupload/disk/DiskFileItem.java	2013-11-07 09:32:20.042865874 -0500
+@@ -656,6 +656,26 @@
+         // read values
+         in.defaultReadObject();
+ 
++        /* One expected use of serialization is to migrate HTTP sessions
++         * containing a DiskFileItem between JVMs. Particularly if the JVMs are
++         * on different machines It is possible that the repository location is
++         * not valid so validate it.
++         */
++        if (repository != null) {
++            if (repository.isDirectory()) {
++                // Check path for nulls
++                if (repository.getPath().contains("\0")) {
++                    throw new IOException(format(
++                            "The repository [%s] contains a null character",
++                            repository.getPath()));
++                }
++            } else {
++                throw new IOException(format(
++                        "The repository [%s] is not a directory",
++                        repository.getAbsolutePath()));
++            }
++        }
++
+         OutputStream output = getOutputStream();
+         if (cachedContent != null) {
+             output.write(cachedContent);

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/patches/series
===================================================================
--- trunk/libcommons-fileupload-java/debian/patches/series	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/patches/series	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1 +0,0 @@
-001_update-tests-for-servlet3-api.patch

Copied: tags/libcommons-fileupload-java/1.3-3/debian/patches/series (from rev 17541, trunk/libcommons-fileupload-java/debian/patches/series)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/patches/series	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/patches/series	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,2 @@
+001_update-tests-for-servlet3-api.patch
+002_CVE-2013-2186.patch

Deleted: tags/libcommons-fileupload-java/1.3-3/debian/rules
===================================================================
--- trunk/libcommons-fileupload-java/debian/rules	2013-12-02 17:23:20 UTC (rev 17533)
+++ tags/libcommons-fileupload-java/1.3-3/debian/rules	2013-12-03 10:07:18 UTC (rev 17552)
@@ -1,10 +0,0 @@
-#!/usr/bin/make -f
-# debian/rules for Commons Fileupload (uses CDBS)
-
-include /usr/share/cdbs/1/rules/debhelper.mk
-include /usr/share/cdbs/1/class/maven.mk
-
-JAVA_HOME_DIRS       := /usr/lib/jvm/default-java
-
-get-orig-source:
-	uscan --force-download --rename

Copied: tags/libcommons-fileupload-java/1.3-3/debian/rules (from rev 17544, trunk/libcommons-fileupload-java/debian/rules)
===================================================================
--- tags/libcommons-fileupload-java/1.3-3/debian/rules	                        (rev 0)
+++ tags/libcommons-fileupload-java/1.3-3/debian/rules	2013-12-03 10:07:18 UTC (rev 17552)
@@ -0,0 +1,12 @@
+#!/usr/bin/make -f
+# debian/rules for Commons Fileupload (uses CDBS)
+
+include /usr/share/cdbs/1/rules/debhelper.mk
+include /usr/share/cdbs/1/class/maven.mk
+
+JAVA_HOME_DIRS       := /usr/lib/jvm/default-java
+
+DEB_INSTALL_CHANGELOGS_ALL := RELEASE-NOTES.txt
+
+get-orig-source:
+	uscan --force-download --rename




More information about the pkg-java-commits mailing list