Java-based dependency manager

Edit Package apache-ivy
http://ant.apache.org/ivy/

Apache Ivy is a tool for managing (recording, tracking, resolving and
reporting) project dependencies. It is designed as process agnostic and is
not tied to any methodology or structure. while available as a standalone
tool, Apache Ivy works particularly well with Apache Ant providing a number
of powerful Ant tasks ranging from dependency resolution to dependency
reporting and publication.

Refresh
Refresh
Source Files
Filename Size Changed
apache-ivy-2.5.1-src.tar.gz 0002725262 2.6 MB
apache-ivy-global-settings.patch 0000000709 709 Bytes
apache-ivy.changes 0000005515 5.39 KB
apache-ivy.spec 0000006181 6.04 KB
ivy-2.5.1.pom 0000006752 6.59 KB
ivy.1 0000002996 2.93 KB
Revision 21 (latest revision is 25)
Dominique Leuenberger's avatar Dominique Leuenberger (dimstar_suse) accepted request 1035296 from David Anes's avatar David Anes (david.anes) (revision 21)
- Upgrade to version 2.5.1 (bsc#1205142, bsc#1205138)
  * Breaking: 
    + Removed old fr\jayasoft\ivy\ant\antlib.xml AntLib definition 
      file.
  * Fixes:
    + CVE-2022-37865 allow create/overwrite any file on the system.
      (see https://ant.apache.org/ivy/security.html)
    + CVE-2022-37866 Path traversal in patterns.
      (see https://ant.apache.org/ivy/security.html)
    + ResolveEngine resets dictator resolver to null in the global 
      configuration.
    + ConcurrentModificationException in 
      MessageLoggerHelper.sumupProblems.
    + useOrigin="true" fails with file-based ibiblio.
    + ivy:retrieve Ant task didn’t create an empty fileset when no 
      files were retrieved to a non-empty directory.
    + ivy:retrieve Ant task relied on the default HTTP header 
      "Accept" which caused problems with servers that interpret it 
      strictly (e.g. AWS CodeArtifact).
  * Improvements:
    + Ivy command now accepts a URL for the -settings option.
Comments 0
openSUSE Build Service is sponsored by