Blob Blame History Raw
-------------------------------------------------------------------
Mon Oct  7 07:22:44 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Add aliases to account for the ephemeral commons-beanutils-core
  and commons-beanutils-bean-collections split.

-------------------------------------------------------------------
Thu Oct  3 08:16:19 UTC 2019 - Fridrich Strba <fstrba@suse.com>

- Remove reference to parent pom, since it is not needed when not
  building with maven

-------------------------------------------------------------------
Wed Aug 21 14:56:26 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>

- Update to 1.9.4
  * BEANUTILS-520: BeanUtils mitigate CVE-2014-0114
- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
- Fix build version in build.xml
  * Added apache-commons-beanutils-fix-build-version.patch

-------------------------------------------------------------------
Tue Oct 23 17:30:33 UTC 2018 - Fridrich Strba <fstrba@suse.com>

- Cleanup the maven pom files installation

-------------------------------------------------------------------
Fri Sep 21 07:44:23 UTC 2018 - Tomáš Chvátal <tchvatal@suse.com>

- Fix the Source URLs to use mirrors properly

-------------------------------------------------------------------
Thu Sep 20 10:45:41 UTC 2018 - pmonrealgonzalez@suse.com

- Updated to 1.9.3 
  * This is a bug fix release, which also improves the tests for
    building on Java 8.
  * Note that Java 8 and later no longer support indexed bean
    properties on java.util.List, only on arrays like String[].	
    (BEANUTILS-492). This affects PropertyUtils.getPropertyType()
    and PropertyUtils.getPropertyDescriptor(); their javadoc have
    therefore been updated to reflect this change in the JDK.
  * Changes in this version include:
    - Fixed Bugs: 
      * BEANUTILS-477: Changed log level in FluentPropertyBeanIntrospector
      * BEANUTILS-492: Fixed exception when setting indexed properties
          on DynaBeans.
      * BEANUTILS-470: Precision lost when converting BigDecimal.
      * BEANUTILS-465: Indexed List Setters fixed.
    - Changes:
      * BEANUTILS-433: Update dependency from JUnit 3.8.1 to 4.12. 
      * BEANUTILS-469: Update commons-logging from 1.1.1 to 1.2. 
      * BEANUTILS-474: FluentPropertyBeanIntrospector does not use the
      	same naming algorithm as DefaultBeanIntrospector.
      * BEANUTILS-490: Update Java requirement from Java 5 to 6. 
      * BEANUTILS-482: Update commons-collections from 3.2.1 to 3.2.2
        (CVE-2015-4852).
      * BEANUTILS-490: Update java requirement to Java 6.
      * BEANUTILS-492: IndexedPropertyDescriptor tests now pass on Java 8. 
      * BEANUTILS-495: DateConverterTestBase fails on M/d/yy in Java 9.
      * BEANUTILS-496: testGetDescriptorInvalidBoolean fails on Java 9.
    - Historical list of changes:
      http://commons.apache.org/proper/commons-beanutils/changes-report.html

- Refreshed patch jdk9.patch for this version update

-------------------------------------------------------------------
Tue May 15 06:03:11 UTC 2018 - fstrba@suse.com

- Modified patch:
  * jdk9.patch
    + Build with source and target 8 to prepare for a possible
      removal of 1.6 compatibility
- Run fdupes on documentation

-------------------------------------------------------------------
Thu Sep 14 09:25:26 UTC 2017 - fstrba@suse.com

- Added patch:
  * jdk9.patch
    - Specify java source and target level 1.6 in order to allow
      building with jdk9

-------------------------------------------------------------------
Thu Dec  4 18:53:24 UTC 2014 - p.drouand@gmail.com

- Remove java-devel dependency; not needed anymore

-------------------------------------------------------------------
Tue Jul  8 11:35:52 UTC 2014 - tchvatal@suse.com

- Cleanup bit with spec-cleaner

-------------------------------------------------------------------
Mon Jul  7 08:04:04 UTC 2014 - dmacvicar@suse.de

- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt

-------------------------------------------------------------------
Mon Apr  2 13:23:15 UTC 2012 - mvyskocil@suse.cz

- update to 1.8.3 and rename to apache- to follow the upstream 
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()

-------------------------------------------------------------------
Mon Sep 25 11:25:13 CEST 2006 - skh@suse.de

- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5

-------------------------------------------------------------------
Wed Jan 25 21:46:36 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Wed Jul 27 16:04:33 CEST 2005 - jsmeix@suse.de

- Adjustments in the spec file.

-------------------------------------------------------------------
Mon Jul 18 16:00:36 CEST 2005 - jsmeix@suse.de

- Current version 1.7.0 from JPackage.org

-------------------------------------------------------------------
Mon Feb 21 15:30:10 CET 2005 - skh@suse.de

- update to version 1.7.0
- don't use icecream

-------------------------------------------------------------------
Thu Sep 16 16:09:13 CEST 2004 - skh@suse.de

- Fix prerequires of javadoc subpackage

-------------------------------------------------------------------
Sun Sep  5 21:45:14 CEST 2004 - skh@suse.de

- Initial package created with version 1.6.1 (JPackage 1.5)