[jackrabbit] 21/21: Update changelog for 2.10.1-1
Markus Koschany
apo-guest at moszumanska.debian.org
Sat Jun 20 22:06:22 UTC 2015
This is an automated email from the git hooks/post-receive script.
apo-guest pushed a commit to branch master
in repository jackrabbit.
commit db5bd98dd7e2523a16d1eade6fa9f85f770a9353
Author: Markus Koschany <apo at gambaru.de>
Date: Sat Jun 20 23:19:42 2015 +0200
Update changelog for 2.10.1-1
---
debian/changelog | 28 +++++++++++++++++++++++++---
1 file changed, 25 insertions(+), 3 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index 286811e..da81c72 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,9 +1,31 @@
-jackrabbit (2.10.1-1) UNRELEASED; urgency=medium
+jackrabbit (2.10.1-1) unstable; urgency=high
* Team upload.
- * New upstream release.
+ * Imported Upstream version 2.10.1.
+ - Fix CVE-2015-1833 (Closes: #787316)
+ When processing a WebDAV request body containing XML, the XML parser can
+ be instructed to read content from network resources accessible to the
+ host, identified by URI schemes such as "http(s)" or "file". Depending on
+ the WebDAV request, this can not only be used to trigger internal network
+ requests, but might also be used to insert said content into the request,
+ potentially exposing it to the attacker and others.
+ * Update watch file and track upstream's stable releases.
+ * Update get-orig-source-target. Download the current version.
+ * Drop orig-tar.sh script. We use upstream's tarballs now.
+ * Repack the orig tarball. Change compression from zip to tar.xz.
+ * Remove maven.publishedRules. It is not needed.
+ * Use compat level 9 and require debhelper >= 9.
+ * Declare compliance with Debian Policy 3.9.6.
+ * Use canonical Vcs fields.
+ * wrap-and-sort -sa.
+ * Drop modules.diff because we disable all modules except webdav in
+ libjackrabbit.poms already.
+ * Fix Format field. Add myself to debian/ copyright holders.
+ * Use Files-Excluded mechanism to remove binary files.
+ * Fix lintian warnings dep5-copyright-license-name-not-unique
+ and comma-separated-files-in-dep5-copyright.
- -- Markus Koschany <apo at gambaru.de> Sat, 20 Jun 2015 20:50:22 +0200
+ -- Markus Koschany <apo at gambaru.de> Sat, 20 Jun 2015 23:14:43 +0200
jackrabbit (2.3.6-1) unstable; urgency=low
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/jackrabbit.git
More information about the pkg-java-commits
mailing list