File apache-commons-beanutils.changes of Package apache-commons-beanutils.12348

Overview Repositories Revisions Requests Users Attributes Meta

File apache-commons-beanutils.changes of Package apache-commons-beanutils.12348

-------------------------------------------------------------------
Wed Aug 21 14:34:18 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>

- Security fix: [bsc#1146657, CVE-2019-10086]
  * PropertyUtilsBean (and consequently BeanUtilsBean) now disallows class
    level property access by default, thus protecting against CVE-2014-0114.
  * Added apache-commons-beanutils-CVE-2019-10086.patch

-------------------------------------------------------------------
Mon Jul  7 08:04:04 UTC 2014 - dmacvicar@suse.de

- update to 1.9.2
- CVE-2014-3540:
  'class' property is exposed, potentially leading to RCE (bnc#885963)
- for full changelog, see
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.0/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.1/RELEASE-NOTES.txt
  * http://commons.apache.org/proper/commons-beanutils/javadocs/v1.9.2/RELEASE-NOTES.txt

-------------------------------------------------------------------
Mon Apr  2 13:23:15 UTC 2012 - mvyskocil@suse.cz

- update to 1.8.3 and rename to apache- to follow the upstream 
- fixes in this release
  * memory leak in jdk5/jdk6 BEANUTILS-291, BEANUTILS-366
  * BEANUTILS-373 MethodUtils is not thread safe because WeakFastHashMap which
    uses WeakHashMap is not thread-safe
  * [BEANUTILS-371] Add constructors which have useColumnLabel parameter to
    ResultSetDynaClass and RowSetDynaClass
  * and a lot of other like NPE in BeanUtilsBean.setProperty()

-------------------------------------------------------------------
Mon Sep 25 11:25:13 CEST 2006 - skh@suse.de

- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5

-------------------------------------------------------------------
Wed Jan 25 21:46:36 CET 2006 - mls@suse.de

- converted neededforbuild to BuildRequires

-------------------------------------------------------------------
Wed Jul 27 16:04:33 CEST 2005 - jsmeix@suse.de

- Adjustments in the spec file.

-------------------------------------------------------------------
Mon Jul 18 16:00:36 CEST 2005 - jsmeix@suse.de

- Current version 1.7.0 from JPackage.org

-------------------------------------------------------------------
Mon Feb 21 15:30:10 CET 2005 - skh@suse.de

- update to version 1.7.0
- don't use icecream

-------------------------------------------------------------------
Thu Sep 16 16:09:13 CEST 2004 - skh@suse.de

- Fix prerequires of javadoc subpackage

-------------------------------------------------------------------
Sun Sep  5 21:45:14 CEST 2004 - skh@suse.de

- Initial package created with version 1.6.1 (JPackage 1.5)

Places

File apache-commons-beanutils.changes of Package apache-commons-beanutils.12348

Places