Change log for bsh package in Debian

bsh (2.0b4-20) unstable; urgency=medium

  * Normalize the permissions of the files in bsh.tar.gz to make
    the build reproducible
  * No longer run the tests if the nocheck build option is specified
  * Standards-Version updated to 4.4.0
  * Use salsa.debian.org Vcs-* URLs

 -- Emmanuel Bourg <email address hidden>  Mon, 09 Sep 2019 14:30:36 +0200

Available diffs

• diff from 2.0b4-19 to 2.0b4-20 (968 bytes)

bsh (2.0b4-19) unstable; urgency=medium

  * Fixed the build failure with Java 9 (Closes: #875340)
  * Applied Jonathan Bustillos' patch to make the build reproducible
    (Closes: #877470)
  * Build with the DH sequencer instead of CDBS
  * Moved the package to Git
  * Standards-Version updated to 4.1.1
  * Switch to debhelper level 10

 -- Emmanuel Bourg <email address hidden>  Thu, 30 Nov 2017 00:39:30 +0100

Available diffs

• diff from 2.0b4-18 to 2.0b4-19 (2.5 KiB)

bsh (2.0b4-18) unstable; urgency=medium

  * Team upload.
  * Transition to the Servlet API 3.1
  * Standards-Version updated to 3.9.8 (no changes)

 -- Emmanuel Bourg <email address hidden>  Mon, 30 May 2016 19:13:58 +0200

Available diffs

• diff from 2.0b4-17ubuntu1 (in Ubuntu) to 2.0b4-18 (1.2 KiB)

bsh (2.0b4-12+deb7u1) wheezy-security; urgency=high

  * Team upload.
  * Fix CVE-2016-2510.
    An application that includes BeanShell on the classpath may be vulnerable
    if another part of the application uses Java serialization or XStream to
    deserialize data from an untrusted source. A vulnerable application could
    be exploited for remote code execution, including executing arbitrary shell
    commands.

 -- Markus Koschany <email address hidden>  Tue, 01 Mar 2016 15:32:04 +0100

bsh (2.0b4-15+deb8u1) jessie-security; urgency=high

  * Team upload.
  * Fix CVE-2016-2510.
    An application that includes BeanShell on the classpath may be vulnerable
    if another part of the application uses Java serialization or XStream to
    deserialize data from an untrusted source. A vulnerable application could
    be exploited for remote code execution, including executing arbitrary shell
    commands.

 -- Markus Koschany <email address hidden>  Tue, 01 Mar 2016 15:54:12 +0100

bsh (2.0b4-17) unstable; urgency=medium

  * Team upload.
  * Update CVE-2016-2510.patch and use java.io.ObjectStreamException and
    java.io.NotSerializableException directly to ensure Jedit can be build from
    source.

 -- Markus Koschany <email address hidden>  Fri, 04 Mar 2016 14:58:01 +0100

bsh (2.0b4-16) unstable; urgency=high

  * Team upload.
  * Fix CVE-2016-2510.
    An application that includes BeanShell on the classpath may be vulnerable
    if another part of the application uses Java serialization or XStream to
    deserialize data from an untrusted source. A vulnerable application could
    be exploited for remote code execution, including executing arbitrary shell
    commands.
  * Declare compliance with Debian Policy 3.9.7.
  * Vcs-Browser: Use https.

 -- Markus Koschany <email address hidden>  Sun, 28 Feb 2016 18:36:28 +0100

bsh (2.0b4-15) unstable; urgency=low


  * Added the poms missing in the previous upload (Closes: #730008)
  * Transition to the Servlet API 3.0 (Closes: #729972)

 -- Emmanuel Bourg <email address hidden>  Thu, 21 Nov 2013 17:16:04 +0100

Available diffs

• diff from 2.0b4-12ubuntu1 (in Ubuntu) to 2.0b4-15 (4.3 KiB)
• diff from 2.0b4-14ubuntu1 (in Ubuntu) to 2.0b4-15 (1.1 KiB)

bsh (2.0b4-14) unstable; urgency=low


  * Upload to unstable
  * Removed the bsh-gcj package
  * Moved the jar and the Maven artifacts in a new libbsh-java package
    that doesn't depend on a Java runtime.
  * debian/control:
    - Removed Michael Koch from the uploaders (Closes: #653998)
    - Use canonical URLs for the Vcs-* fields
    - Updated Standards-Version to 3.9.5 (no changes)
  * Build depend on debhelper >= 9

  [ Niels Thykier ]
  * Changed the section of bsh to devel

 -- Emmanuel Bourg <email address hidden>  Mon, 04 Nov 2013 16:45:40 +0100

bsh (2.0b4-13) experimental; urgency=low


  * Team upload.
  * Upload to experimental due to freeze.
  * Moved the gcj package to the java section.
  * Replaced B-D on default-jdk-builddep with gcj-native-helper and
    default-jdk.
  * Bumped Standards-Versions 3.9.1 - no changes required.
  * Updated README.Debian to better reflect the current times.
  * Added descriptions to the patches.
  * Added patch to fix a typo in the upstream code.
  * Added mh_clean to the clean rule.
  * Linked the javadoc against the system javadoc.

 -- Niels Thykier <email address hidden>  Sun, 21 Nov 2010 20:11:13 +0100

bsh (2.0b4-12) unstable; urgency=low


  * Build-depend on libservlet2.5-java instead of libservlet2.4-java.

 -- Thierry Carrez <email address hidden>  Fri, 11 Jun 2010 16:20:23 +0200

bsh (2.0b4-11) unstable; urgency=low


  [ Ludovic Claude ]
  * Change bsh-gcj section to libs.

  [ Gabriele Giacone ]
  * Team upload.
  * Added bsh-src binary package generation.
  * Source format 3.0 (quilt).
  * debhelper compatibility to 7.
  * Standards-Version to 3.8.4.
  * Removed Arnaud Vandyck from Uploaders.

 -- Gabriele Giacone <email address hidden>  Fri, 16 Apr 2010 22:28:13 +0200

bsh (2.0b4-10) unstable; urgency=low


  * Upload to unstable.

 -- Torsten Werner <email address hidden>  Sun, 09 Aug 2009 10:28:52 +0200

bsh (2.0b4-9) experimental; urgency=low


  * Change section to java, bump up Standards-Version to 3.8.1
  * Add support for -classpath option on xbsh script (closes: #504784)
  * rules: add optional support for gcj and optimisation
  * Add the Maven POM to the package,
  * Add a Build-Depends dependency on maven-repo-helper
  * Use mh_installpom and mh_installjar to install the POM and the jar to the
    Maven repository

 -- Ludovic Claude <email address hidden>  Sat, 09 May 2009 20:38:06 +0100

bsh (2.0b4-8) unstable; urgency=low


  * Build-Depends on default-jdk-builddep. Closes: #477849
  * Clarified debian/copyright.
  * Put bsh-doc.doc-base.1 into Programming/Java section.
  * Added Homepage, Vcs-Svn and Vcs-Browser fields.
  * Updated Standards-Version to 3.7.3.
  * Added watch file.

 -- Michael Koch <email address hidden>  Sun, 27 Apr 2008 20:12:21 -0100