lp:ubuntu/precise-security/batik

Created by Ubuntu Package Importer and last modified
Get this branch:
bzr branch lp:ubuntu/precise-security/batik
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

12. By Marc Deslauriers

* SECURITY UPDATE: XML external entity information disclosure
  - debian/patches/cve_2015_0250.patch: disable external entities in
    sources/org/apache/batik/dom/util/SAXDocumentFactory.java.
  - Thanks to Debian for the patch backport.
  - CVE-2015-0250

11. By Micah Gersten

* Merge from Debian testing (LP: #946158), remaining changes:
  + fix upstream version since we're stuck with this fake upstream version
    until the next upstream release
    - update debian/rules
* Drop debian/patches/series diff as Debian now has their own version
  which works fine
* Mark Vcs-* as XS-Debian-Vcs-*
  - update debian/control

10. By Andrew Ross

* Fakesync from Debian unstable. (LP: #681078)
* Add a debian/patches/series file so patches are applied (also reported
  in Debian #604871, however since we can't currently sync their version
  we should fix it in Ubuntu too).
* Debian changes from 1.7-5 to 1.7-6 are:

[ Vincent Fourmond ]
* Really fix the dependency on java runtime to only pull headless
  runtimes

[ Gabriele Giacone ]
* Added Maven support
* Standards-Version to 3.8.4
* Source format 3.0 (quilt)

* Debian changes from 1.7-4 to 1.7-5 are:

[ Vincent Fourmond ]
* Dropped the dependency on openjdk-6-jre, in profit for
  openjdk-6-jre-headless, so we won't pull the whole Gtk libraries just
  for using fop (closes: #551545).
* Already conforms to standards 3.8.3
* Removing Arnaud Vandyck from Uploaders as he did retire. Many thanks
  for your work on batik !

9. By Maia Everett

* Fakesync from Debian unstable. Version number bumped because the
  previous Ubuntu version 1.7.dfsg is greater than 1.7.
* debian/rules:
  - Added a VERSION variable to strip .ubuntu from DEB_UPSTREAM_VERSION,
    to ensure correct version (1.7) in jar names.

8. By Onkar Shinde

* debian/patches/06_fix_paths_in_policy_files.patch
  - Change paths in policy files as per our installation paths.
  (LP: #302019).
* debian/squiggle.sh
  - Add xml-apis-ext to classpath. Fixes class not found exception.
  - Also add js.jar (found in package rhino) to classpath.
* debian/control
  - Move rhino to depends as squiggle (svgbrowser) uses it.

7. By Maia Everett

* Added debian/patches/05_fix_ps_transcoder.patch:
  - Fix FTBFS against xmlgraphics-commons 1.3 (LP: #352546)
* Fixed debian/rasterizer.sh per patch by Mihai Capotă:
  - Fix java.lang.NoClassDefFoundError in rasterizer (LP: #314051)

6. By Maia Everett

[ Onkar Shinde ]
* New upstream version (LP: #147818)
* debian/control
  - Add Sun JDK 1.5 as build dependency. Fixes FTBFS on buildd. (LP: #150484)
    Also add Sun JRE as runtime dependencies.
  - Add ant-optional as build dependency.
  - Add libxml-commons-external-java and libxmlgraphics-commons-java as
    build and runtime dependencies.
  - Add 'Homepage' field and correct the url.
  - Change standards version to 3.8.0.
  - Modify Maintainer value to match the DebianMaintainerField
    specification.
* debian/rules
  - Change JAVA_HOME_DIRS for Sun JDK.
  - Add jar file names to DEB_JARS to match new build requirements.
  - Extract version from changelog.
  - Delete bundled jar files in clean target.
  - Don't use hardcoded version in install target.
  - Add get-orig-source target.
* debian/README.Debian-source
  - Change the fo tag name to the one used for this version.
* debian/watch
  - Change expression to match src distribution.
* debian/patches/
  - 01_build_xml.patch, 02_fix_jar_target.patch - Refresh for current source.
  - 03_fix_lib_dirs.patch - Fix the library and classpath references needed
    for pdf transcoder build.
  - 04_fix_transcoder_pkg.patch - Fix transcoder-pkg target to not copy
    files from other jar files.

[ Matvey Kozhev ]
* debian/changelog:
  - Added ".dfsg" to version.
* debian/control, debian/rules:
  - Build with openjdk-6-jdk, depend on openjdk-6-jre.
  - Added java-6-sun as an alternate build JAVA_HOME directory.
  - Fixed get-orig-source to not include debian/ and delete the source dir,
    and made it delete jars from lib/, as done in the current batik package.
* debian/wrappers.sh:
  - Changed java-7-icedtea reference to java-6-openjdk, as the former has been
    removed back in Hardy.
  - Added newline.
* debian/libbatik-java.install:
  - Added newline.

5. By Vincent Fourmond

[ Mark Howard ]
* debian/watch: added.

[ Vincent Fourmond ]
* Created a /usr/lib/java/wrappers.sh for the various programs
  provided by libbatik-java, to make them work in more various
  environments.
* Manual pages for svgpp, rasterizer, squiggle and ttf2svg
  (Closes: #458021)
* rasterizer now launches by default with -scriptSecurityOff so it
  works again (Closes: #413103). Added an option to turn security back on.
* Comply with policy 3.7.3
* Changed build-deps to sun-j2sdk1.4, to reflect the current make-jpkg
  output.

4. By Michael Koch

* Add wrapper scripts (rasterizer.sh squiggle.sh svgpp.sh ttf2svg.sh)
  to start batik applications. Install them without the .sh prefix in
  /usr/bin/. (Closes: #152180)
* Removed build dependency on libgnujaxp-java (Closes: #385293).
* Build-Depends on debhelper and cdbs (instead of Build-Depends-Indep).
* Build-Depends-Indep on java-gcj-compat-dev.
* Updated Standards-Version to 3.7.2.
* Added myself to Uploaders.

3. By Wolfgang Baer

* New upstream release - security fix [CAN-2005-0508] (closes: #288009)
* Added rhino as build dependency
* Added rhino to Suggests
* Switched to jdk modern compiler because jikes fails
* Updated README.Debian explaining why built with non-free jdk
* Updated standards version to 3.6.1 - no changes
* avdyk: I added Wolfgang to the uploaders

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/vivid/batik
This branch contains Public information 
Everyone can see this information.

Subscribers