mirror of https://gitee.com/openkylin/batik.git
1 Commits
Author | SHA1 | Message | Date |
---|---|---|---|
admin | dd60026626 |
Import Debian changes 1.17+dfsg-ok1
batik (1.17+dfsg-ok1) unstable; urgency=medium . * rebuild source for openKylin . batik (1.17+dfsg-1) unstable; urgency=medium . * New upstream version 1.17+dfsg, fixing security issues: - CVE-2022-44729 - CVE-2022-44730 * Refreshing patches * Raising Standards version to 4.6.2 (no change) * Refreshing copyright years * Ignoring maven-javadoc-plugin * Fixing mismatched Lintian overrides . batik (1.16+dfsg-1) unstable; urgency=medium . * New upstream version 1.16+dfsg, fixing security issues: - CVE-2022-41704 - CVE-2022-42890 . batik (1.15+dfsg-1) unstable; urgency=medium . * New upstream version, fixing security issues (Closes: #1020589): - CVE-2022-38398 - CVE-2022-38648 - CVE-2022-40146 * Adding a +dfsg suffix when repacking * Updating years in d/copyright * Adding myself as uploader * Re-export upstream signing key without extra signatures. * Set upstream metadata fields: Repository, Repository-Browse, Bug-Database * Adding Lintian overrides for the codeless jars * Adding DEP-3 headers for the patches . batik (1.14-2) unstable; urgency=medium . * Team upload * Adding classpaths and main classes in the manifests of the built jars (Closes: #1013281) * Reworking debian/watch: - Raising its version to 4 - Using secure URI * Raising Standards version to 4.6.1 (no change) * Refreshing d/copyright * Getting rid of unneeded versioned dependencies in d/control . [ Andrius Merkys ] * Remove Onkar Shinde from the uploaders list per request. Thanks for your contributions. . batik (1.14-1) unstable; urgency=medium . * Team upload. * New upstream version 1.14 (Closes: #1000561) Addresses CVE-2020-11987 (Closes: #984829) * Set Rules-Requires-Root: no in debian/control * Let java7-runtime-headless satisfy Recommends (Closes: #1000405) * Delete patch for CVE-2109-17566; applied upstream * Update poms; add batik-shared-resources; remove batik-test-util * Add build-dep on libmaven-dependency-plugin-java . batik (1.12-4) unstable; urgency=medium . * Team upload. * Add manifest for batik-i18n. * Mark in batik-css manifest it requires batik-i18n. . batik (1.12-3) unstable; urgency=medium . * Team upload. * Update version of Require-Bundle in d/manifest. . batik (1.12-2) unstable; urgency=medium . * Team upload. * Use debhelper-compat. - Update compat level to 13. * Update version in d/manifest. * Use java helper to generate MANIFEST.MF from d/manifest. - MANIFEST file in generate jars missed Bundle information. * Update Standards-Version to 4.5.0 . batik (1.12-1.1) unstable; urgency=medium . * Non-maintainer upload. * CVE-2019-17566: Server-side request forgery via xlink:href attributes. . batik (1.12-1) unstable; urgency=medium . * Team upload. * New upstream 1.12 . batik (1.10-2) unstable; urgency=medium . * Team upload. * Fixed the build failure with Java 11 (Closes: #913050) * Tightened the version of maven-debian-helper required to build batik (Closes: #902532) * Standards-Version updated to 4.2.1 * Use salsa.debian.org Vcs-* URLs . batik (1.10-1) unstable; urgency=medium . * Team upload. * New upstream version 1.10. - squiggle works as expected again after updating the policy patch. (Closes: #884481) - Fix CVE-2018-8013: information disclosure vulnerability. (Closes: #899374) * Drop 07_optional_rhino_and_jython_dependencies.patch. Applied upstream. * Remove repack scripts and use Files-Excluded mechanism instead. * Update the watch file. Use Files-Excluded. * Ignore jython artifact and add no-Jython-support.patch. Jython as a scripting language for Batik is no longer supported because the dependency complicates transitions. (Closes: #884536) * Ignore batik-test-old module. . batik (1.9-3) unstable; urgency=medium . * Team upload. * Made the rhino and jython dependencies optional (Closes: #875322) * Removed the unused dependencies on libbsf-java, libcommons-io-java and libcommons-logging-java * Build with Maven instead of Ant * Build with the DH sequencer instead of CDBS * Standards-Version updated to 4.1.1 * Switch to debhelper level 10 . batik (1.9-2) unstable; urgency=medium . * Fix "batik-1.9 causes FTBFS for freeplane due to changed artifacts/poms" Upstream poms assume maven build. Ant build bundles contents of batik-i18n.jar and batik-constants.jar into batik-util.jar. Use debian/maven.rules to adjust for this. (Closes: #875322) . batik (1.9-1) unstable; urgency=medium . * Team upload. * Moved the package to Git * Updated signing keys from https://www.apache.org/dist/xmlgraphics/batik/KEYS * Exclude jar files from documentation-sources * Add repack script to remove non-free ICC profiles * New upstream (1.9) + Fix "CVE-2017-5662: information disclosure vulnerability" Upstream claim BATIK-1139 is fixed in 1.9 (Closes: #860566) * Disable old patches, pending further investigation * Get package building again + maven-artifacts is no longer a target, explicitly add jars to DEB_ANT_BUILD_TARGET + Add debian/debian/libbatik-java.poms, call mh_install to install jars and poms, for closer alignment to other pkg-java packages * Fix spellings in debian/manpages/rasterizer.1 * Remove redundant remove-js.patch * Fix "batik is crashing (libbatik-java)" by patching build.xml to specify classpaths as appropriate for Debian (Closes: #605063) * Update Standards-Version from 3.9.8 to 4.0.0 (no change required) * Update 06_fix_paths_in_policy_files.patch * Remove bug805469.patch (fixed upstream http://svn.apache.org/viewvc?view=revision&revision=1687506) * Update debian/copyright * Remove unnecessary greater-than versioned dependencies from debian/control . batik (1.8-4) unstable; urgency=medium . [ Jakub Adam ] * Team upload. * Fix versioned OSGi dependencies. * Fix repeating Breaks: in d/control. . [ Mathieu Malaterre ] * Team upload. * Fix squiggle script crashes with a NoClassDefFoundError. Closes: #824113 * Fix FOUserAgent - SVG graphic could not be built. Closes: #805469 * Bump Std-Vers to 3.9.8, no changes needed . batik (1.8-3) unstable; urgency=medium . [ Mathieu Malaterre ] * Team upload. * Fix compatibility issue. Closes: 794214 . [ Emmanuel Bourg ] * Removed the unused dependency on libavalon-framework-java . batik (1.8-2) experimental; urgency=medium . * Team upload. * Fix truncated patch: d/p/06_fix_paths_in_policy_files.patch * Fix broken symlinks (Thanks to Jérôme Robert/debian-java) . batik (1.8-1) experimental; urgency=medium . * Team upload. * New upstream. Closes: #792175 * Refreshed patches, remove one applied upstream. * Prefer File-Excluded: syntax over new-upstream script . batik (1.7+dfsg-5) unstable; urgency=medium . [ tony mancill ] * Team upload. * Update homepage URL to https://xmlgraphics.apache.org/batik/ in debian/control and debian/copyright. (Closes: #771539) * Add debian/patches/cve_2015_0250.patch to disable external XML entity resolution (information disclosure). This addresses CVE-2015-0250. (Closes: #780897) . [ Emmanuel Bourg ] * Replaced the Build-Id in the manifests with a constant value to make the build reproducible. . batik (1.7+dfsg-4) unstable; urgency=low . * Team upload. [ Jakub Adam ] * Add OSGi metadata to JAR manifests. . [ Markus Koschany ] * debian/rules: Set JAVA_HOME_DIRS to /usr/lib/jvm/default-java, build-depend on default-jdk and not on openjdk6-jdk | openjdk-7-jdk anymore. Fixes FTBFS with pbuilder-satisfydepends-classic. (Closes: #725461) * Bump Standards-Version to 3.9.4, no changes. * Bump compat level to 9 and require debhelper >= 9. * Use canonical VCS-URI. * Remove Michael Koch from Uploaders. (Closes: #653996) * libatik-java: Drop all jre/jdk dependencies. Recommend default-jre instead. * Run wrap-and-sort -sa * Add DEP-3 header to all patches. . batik (1.7+dfsg-3) unstable; urgency=low . * Team upload. * Fix too strict Java JRE dependency. (Closes: #678612) . batik (1.7+dfsg-2) unstable; urgency=low . * Team upload. * Allow OpenJDK-7 as alternative to OpenJDK-6. * Remove old references to sun-java. * Add missing call to mh_clean in the clean rule. * Fix typo in manpage. . batik (1.7+dfsg-1) unstable; urgency=low . * Provide a repackaged tarball stripping all binary jars (closes: #657244) - updated debian/new-upstream as a consequence * Disable the installation of batik-js.jar, that wasn't built from sources (it was a subset of rhino's js.jar) * Conforms to standards 3.9.3 * Modernize a bit debian/copyright . batik (1.7-8) unstable; urgency=low . * Fix FTBS with recent openjdk (closes: #643508) * Bump to newer standards version, no changes required . batik (1.7-7) unstable; urgency=low . * Re-enable all patches that had mistakenly been disabled by switching to source format 3.0 (quilt) (closes: #604871) * Already conforms to standards 3.9.1 . batik (1.7-6) unstable; urgency=low . [ Vincent Fourmond ] * Really fix the dependency on java runtime to only pull headless runtimes . [ Gabriele Giacone ] * Added Maven support * Standards-Version to 3.8.4 * Source format 3.0 (quilt) . batik (1.7-5) unstable; urgency=low . * Dropped the dependency on openjdk-6-jre, in profit for openjdk-6-jre-headless, so we won't pull the whole Gtk libraries just for using fop (closes: #551545). * Already conforms to standards 3.8.3 * Removing Arnaud Vandyck from Uploaders as he did retire. Many thanks for your work on batik ! . batik (1.7-4) unstable; urgency=low . * Porting fixes from Ubuntu (1.7.dfsg-0ubuntu3) by Onkar Shinde <onkarshinde@ubuntu.com>: - add xml-apis-ext and js to classpath for debian/wrappers/squiggle - promote rhino to a Recommends, as squiggle depends on it - debian/patches/06_fix_paths_in_policy_files.patch to fix the paths of the security policy files * This finally makes squiggle work for Debian ! (closes: #499852) Many thanks again to Onkar... . batik (1.7-3) unstable; urgency=low . [ Onkar Shinde ] * debian/rules - Use DEB_UPSTREAM_VERSION at all places. - Add symlinks batik-<version>.jar and batik.jar pointing to batik-all-<version>.jar. (Closes: #522340) * debian/control - Add myself to 'Uploaders'. . [ Vincent Fourmond ] * Changed section to java, what currently is in the archive * Already conforms to standard 3.8.1 * Bumped debhelper compatibility level to 5, and bumped Build-depends accordingly . batik (1.7-2) unstable; urgency=low . * Adding xmlgraphics-commons-1.2 and xml-apis-ext to the jars for the build + corresponding build-deps * Added Vcs-* fields . [ Sylvestre Ledru ] * Build class version 49 (instead of 50) . [ Vincent Fourmond ] * Minor updates to the debian/copyright file * It seems time has come for an upload to unstable... * Adding ${misc:Depends} for potential debhelper-induced dependencies * Tweaking rasterizer.1 to avoid unbreakable lines . batik (1.7-1) experimental; urgency=low . * New upstream release (Closes: #417888, #490556) * Switched to using java-wrappers for executables; dropping the /usr/lib/java/wrappers.sh script * Switched debian/copyright to a machine-readable format * Added ANT_OPTS to fix the compiler out of memory problem * Removing 02_fix_jar_target, no longer applicable * Removing 01_build_xml, as the created target (pdf-transcoder) cannot be built anymore * Fixed JAVA_HOME_DIRS so it can build with Sun's java 5 * Strip the full text of the Apache-2.0 license, as it now is in the common licenses * Switch to openjdk-6-jdk for building (closes: #397562) * Several tweaks in debian/rules to build and install all the jars, based on a patch by Sylvestre Ledru <sylvestre.ledru@inria.fr> * Now depends also on libxml-commons-external-java for SVG parsing * Conforms to standards 3.8.0 * Updated rasterizer.sh to work with libxml-commons-external-java and openjdk (closes: #490621) * Move wrapper scripts to debian/wrappers, updating debian/rules accordingly * Recommend fop for PDF output of rasterizer * Removed README.Debian-source: we don't add the fop sources anymore as those are already packaged in the fop debian package * Uploading to experimental, as there are potentially much too many disruptive changes to this package. . batik (1.6-4) unstable; urgency=low . [ Mark Howard ] * debian/watch: added. . [ Vincent Fourmond ] * Created a /usr/lib/java/wrappers.sh for the various programs provided by libbatik-java, to make them work in more various environments. * Manual pages for svgpp, rasterizer, squiggle and ttf2svg (Closes: #458021) * rasterizer now launches by default with -scriptSecurityOff so it works again (Closes: #413103). Added an option to turn security back on. * Comply with policy 3.7.3 * Changed build-deps to sun-j2sdk1.4, to reflect the current make-jpkg output. . batik (1.6-3) unstable; urgency=low . * Add wrapper scripts (rasterizer.sh squiggle.sh svgpp.sh ttf2svg.sh) to start batik applications. Install them without the .sh prefix in /usr/bin/. (Closes: #152180) * Removed build dependency on libgnujaxp-java (Closes: #385293). * Build-Depends on debhelper and cdbs (instead of Build-Depends-Indep). * Build-Depends-Indep on java-gcj-compat-dev. * Updated Standards-Version to 3.7.2. * Added myself to Uploaders. . batik (1.6-2) unstable; urgency=low . * Re-Introduce lost link batik.jar and add 02_fix_jar_target.patch to fix library content (closes: #334878) * Thighten depends on avalon-framework (closes: #335883) * Corrected README.Debian . batik (1.6-1) unstable; urgency=low . * New upstream release + Updated copyright to Apache 2.0 License * libant1.6-java to ant transition * Use JAVA_HOME dirs as generated by java-package (closes: #306639) * Include, build and ship the pdf-transcoder from fop CVS (closes: #327354) + See README.Debian-source for details about the transcoder source + Added build-deps and depends on libavalon-framework-java, libcommons-io-java and libcommons-logging-java for the pdf-transcoder + Patched build.xml to call the pdf-transcoder build target * Removed Ola and Stephan from uploaders * Extended description a little bit * Standards-Version 3.6.2 (no changes) . batik (1.5.1-1) unstable; urgency=low . * New upstream release - security fix [CAN-2005-0508] (closes: #288009) * Added rhino as build dependency * Added rhino to Suggests * Switched to jdk modern compiler because jikes fails * Updated README.Debian explaining why built with non-free jdk * Updated standards version to 3.6.1 - no changes * avdyk: I added Wolfgang to the uploaders . batik (1.5final-3) unstable; urgency=low . * expand SVG in description (closes: #173105). . batik (1.5final-2) unstable; urgency=low . * added the dependency and the path to j2sdk1.3 to build batik (closes: #192539). You got to know that I have not been able to build batik with j2sdk1.3. I've been obliged to build it with IBMJDK1.4.1. * added gnujaxp as a dependency and in the classpath (closes: #192542) . batik (1.5final-1) unstable; urgency=low . * New upstream release * Build system is now CDBS * Added build-dependencies libxalan2-java and libbsf-java * Changed Stefan Gybas email * j2sdk to build and j2re to run because of swing * Debian Java Maintainers is now the new maintainer, added Ola Lundqvist <opal@debian.org>, Takashi Okamoto <tora@debian.org>, Stefan Gybas <sgybas@debian.org>, Arnaud Vandyck <avdyk@debian.org> as uploaders . batik (1.5beta2-4) unstable; urgency=low . * Renamed the batik jar file, closes: #171327. . batik (1.5beta2-3) unstable; urgency=low . * Jars in /usr/share/java not in /usr/share/java/lib, closes: #170791. . batik (1.5beta2-2) unstable; urgency=low . * New maintainer. * Fixed dependencies, closes: #158221. * Fixed build problem. * Added two other people as co-maintainers. * Fixed so that building wont take that long time if -nc option is used. * Now can use kaffe instead of j2sdk. Workaround for a bug in kaffe. On the other hand it seems not like the classic compiler so I still have to set that damn JAVA_HOME to the j2sdk... . batik (1.5beta2-1) unstable; urgency=low . * Initial Upload (Closes: #149676) |