Author: Emmanuel Bourg
Revision Date: 2014-10-21 19:03:34 UTC

* Team upload.
* New upstream release
  - Refreshed java8-compatibility.patch
* Standards-Version updated to 3.9.6 (no changes)

Author: Emmanuel Bourg
Revision Date: 2014-10-21 19:03:34 UTC

* Team upload.
* New upstream release
  - Refreshed java8-compatibility.patch
* Standards-Version updated to 3.9.6 (no changes)

Author: Emmanuel Bourg
Revision Date: 2014-10-21 19:03:34 UTC

* Team upload.
* New upstream release
  - Refreshed java8-compatibility.patch
* Standards-Version updated to 3.9.6 (no changes)

Author: Emmanuel Bourg
Revision Date: 2014-04-16 14:02:19 UTC

* Team upload.
* Do not create a self signed certificate every time the HTTPS connector
  is started without a proper certificate. This fixes the compatibility
  with Java 8 since the sun.security.x509.CertAndKeyGen class has been
  moved to the sun.security.tools.keytool package.
* debian/control:
  - Build depend on default-jdk instead of openjdk-7-jdk
  - Use canonical URLs for the Vcs-* fields
  - Standards-Version updated to 3.9.5 (no changes)
* Switch to debhelper level 9

Author: Emmanuel Bourg
Revision Date: 2014-04-16 14:02:19 UTC

* Team upload.
* Do not create a self signed certificate every time the HTTPS connector
  is started without a proper certificate. This fixes the compatibility
  with Java 8 since the sun.security.x509.CertAndKeyGen class has been
  moved to the sun.security.tools.keytool package.
* debian/control:
  - Build depend on default-jdk instead of openjdk-7-jdk
  - Use canonical URLs for the Vcs-* fields
  - Standards-Version updated to 3.9.5 (no changes)
* Switch to debhelper level 9

Author: James Page
Revision Date: 2013-08-12 16:14:33 UTC

* New upstream release.
* d/control: Update my email address.

Author: James Page
Revision Date: 2013-08-12 16:14:33 UTC

* New upstream release.
* d/control: Update my email address.

Author: James Page
Revision Date: 2013-08-12 16:14:33 UTC

* New upstream release.
* d/control: Update my email address.

Author: James Page
Revision Date: 2013-02-17 17:40:14 UTC

* New upstream release:
  - d/control,maven.rules: Bump junit -> junit4.

Author: James Page
Revision Date: 2013-02-17 17:40:14 UTC

* New upstream release:
  - d/control,maven.rules: Bump junit -> junit4.

Author: James Page
Revision Date: 2013-01-10 11:41:41 UTC

* SECURITY UPDATE: HTTP splitting vulnerability (LP: #1098135):
  - d/p/CVE-2012-6072.patch: Cherry picked fix from upstream VCS
    which prevents HTTP headers being split into multiple lines.
  - CVE-2012-6072

Author: James Page
Revision Date: 2013-01-10 11:40:02 UTC

* SECURITY UPDATE: HTTP splitting vulnerability (LP: #1098135):
  - d/p/CVE-2012-6072.patch: Cherry picked fix from upstream VCS
    which prevents HTTP headers being split into multiple lines.
  - CVE-2012-6072

Author: James Page
Revision Date: 2012-06-21 20:25:39 UTC

* New upstream release:
  - d/patches/java-1.6.patch: Dropped - upstream is now Java 6 compatible.
  - d/control: Add new dependency on libmaven-enforcer-plugin-java.
* Fix FTBFS with openjdk-7 (LP: #888947):
  - d/patches/java7-compat.patch: Add stub methods and allow compilation
    with Java 6+.

Author: James Page
Revision Date: 2012-01-27 16:01:06 UTC

* SECURITY UPDATE: Hash DoS vulnerability in parameter
  handling (LP: #914628):
  - debian/patches/hash-dos-fix.patch: Cherry picked fix from upstream
    to prevent this vulnerability.
  - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-01-10.cb

Author: James Page
Revision Date: 2012-01-27 16:01:06 UTC

* SECURITY UPDATE: Hash DoS vulnerability in parameter
  handling (LP: #914628):
  - debian/patches/hash-dos-fix.patch: Cherry picked fix from upstream
    to prevent this vulnerability.
  - http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-01-10.cb

Author: James Page
Revision Date: 2012-01-16 23:09:25 UTC

Fake sync due to mismatching orig tarball.

Author: James Page
Revision Date: 2011-11-22 13:01:45 UTC

SECURITY UPDATE: XSS vulnerability in default error pages (LP: #889181).

Author: James Page
Revision Date: 2011-08-18 09:55:33 UTC

* Support offline validation of XML configuration files (LP: #827651):
  - debian/patches/specification-resources.patch: CDDL/GPL-2 licensed
    xsd+DTD resources for all servlet, jsp and j2ee specifications.
  - debian/copyright: documented copyright + license for
    specification-resources.patch.
  - debian/control: Removed dependency on libservlet2.5-java, no longer
    required.
  - debian/patches/series,debian/patches/use_system_servletapi.patch:
    Dropped patch as no longer required.
  - debian/libjenkins-winstone-java.classpath: Dropped as all required
    resources are now included in winstone.

Author: James Page
Revision Date: 2011-08-18 09:10:06 UTC

* Support offline validation of XML configuration files (LP: #827651):
  - debian/patches/specification-resources.patch: CDDL/GPL-2 licensed
    xsd+DTD resources for all servlet, jsp and j2ee specifications.
  - debian/copyright: documented copyright + license for
    specification-resources.patch.
  - debian/control: Removed dependency on libservlet2.5-java, no longer
    required.
  - debian/patches/series,debian/patches/use_system_servletapi.patch:
    Dropped patch as no longer required.
  - debian/libjenkins-winstone-java.classpath: Dropped as all required
    resources are now included in winstone.