Changelog for ant-apache-log4j-1.10.12-1.1.noarch.rpm :

* Mon May 09 2022 Fridrich Strba - Disable a test failing to compile with junit5 5.8.x
* Tue Feb 22 2022 Fridrich Strba - Do not build against the log4j12 packages, use the new reload4j
* Wed Dec 15 2021 David Anes - Update to 1.10.12:
* The update includes fixes for the following CVEs: CVE-2021-36374, bsc#1188469 Excessive memory allocation when reading a specially crafted ZIP archive or a derived formats. CVE-2021-36373, bsc#1188468 Excessive memory allocation when reading a specially crafted TAR archive.
* The http condition would follow redirects even when \"followRedirects\" attribute was set to \"false\". This has now been fixed. Bugzilla Report 65489
* Made sure setting build.compiler to the fully qualified classname that corresponds to extJavac or modern has the same effect as using the shorter alias names. Bugzilla Report 65539
* Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper. Bugzilla Report 65424
* The implementation of AntClassLoader#findResources() has been changed to optimize it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405 Github Pull Request #151
* AntClassLoader now implements the ClassLoader#findResource(String) method. Github Pull Request #150
* Ant tries to avoid file name canonicalization when possible. Bugzilla Report 65499
* javadoc task will now look for warning messages in the STDERR stream too when \"failonwarning\" is set to true to account for changes in JDK 17+
* The tar task now preserves symlinks of nested tarfilesets. Github Pull Request #142- Changes from 1.10.11:
* a race condition could lead to NullPointerExceptions when running tasks in parallel. Bugzilla Report 65316
* fixed potential OutOfMemory errors when reading broken archives using the tar or zip formats or formats derived from zip.
* org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now has a new protected createExecuteWatchdog() method for allowing it to be overriden. Github Pull Request #147
* Upgraded AntUnit to 1.4.1.
* Thu Jun 03 2021 Pedro Monreal - Update to 1.10.10
* SCP (with sftp=true) task would fail if fetching file located in root directory.
* Fixed: javac task would fail if the arguments file it (internally) created didn\'t quote the # character.
* Make sure LegacyXmlResultFormatter encodes characters illegal in XML the same way JUnit5\'s built-in formatter would.
* LegacyXmlResultFormatter no longer double-encodes <>& in system-err and system-out.
* Fixes a bug in junitlauncher task\'s legacy-xml formatter, where the testcase representing a AATTParameterized JUnit4 test wasn\'t being reported in the XML.
* Fixes a bug where the ant-testutil-sources.jar that gets published to Maven central repository didn\'t contain any source files.
* The condition didn\'t follow redirects from http to https.
* ZipOutputStream now overrides write(int) in order to make sure single byte writes get the same treatment as array writes.
* Fixes a potential deadlock in junitlauncher task when using legacy-xml reporter.
* javaversion condition now has a new \"atmost\" attribute. See the javaversion manual for more details
* The \"listener\" nested element of the \"junitlauncher\" task now has a new \"useLegacyReportingName\" attribute which can be used to control the test identifiers names that get reported by the listener. See the junitlauncher manual for more details. Note that this change also introduces a new \"setUseLegacyReportingName\" method on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter interface. This will break backward compatibility with any of your custom result formatters which implemented this interface and such implementations are now expected to implement this new method.
* A new attribute preserveduplicates allows to return the same resource multiple times when set to true.
* A new attribute filterbeforeconcat in can be used to decide whether the filterchain should be applied to the concatenated content (the default) or each nested resource individually before concatenating them.
* The ssh tasks now share a new nested element additionalConfig that can be used to set config values for the jsch Session used by the task.
* Added new discardOutput and discardError properties to redirector and the exec, apply and java tasks which can be used to completely discard any (error) output. This is a platform independent alternative to directiong output to any kind of null device.
* junitlauncher now prints a more useful and instantaneous summary of tests being run, closely matching the junit task\'s summary.
* Thu Oct 01 2020 Pedro Monreal - Update to 1.10.9
* Security fix: [bsc#1177180, CVE-2020-11979] - Insecure temporary file vulnerability
* Fixed bugs: - The ftp task could throw a NullPointerException if an error occured. - Propertyset now also sees in-scope local properties. - Replaced ReaderInputStream with the version of Apache Commons IO due to problems with surrogate pairs. - will no longer remove the temporary file it just created before writing to it. - and didn\'t deal with wildcard hostnames in shs config files properly.
* Other changes: - Ant will no longer log a warning if it doesn\'t find tools.jar. - The task accepts now a nested element that can be used to perform custom filename transformations for the archives. - Added a new PropertyEnumerator interface that extensions can provide if they are managing properties unknown to the Ant project. - Added some special code to support GraalVM JavaScript as javax.script scripting engine for JavaScript. In particular we relax some security settings of GraalVM so that scripts can access Ant objects. - Also Ant enables Nashorn compatibility mode by default, you can disable that by setting the magic Ant property ant.disable.graal.nashorn.compat to true. - If the magic property ant.tmpdir hasn\'t been set and Ant can control the permissions of directories it creates it will create an owner-owned temporary directory unaccessible to others as default tempdir as soon as a temporary file is created for the first time.
* Thu May 14 2020 Pedro Monreal Gonzalez - Update to 1.10.8
* Security fix: [CVE-2020-1945, bsc#1171696] - A new property ant.tmpdir provides improved control over the location Ant uses to create temporary files
* sshexec failed to write output to a file if the file didn\'t exist
* Fixes a regression in javac task involving command line argument files.
* sshexec, sshsession and scp now support a new sshConfig parameter. It specified the SSH configuration file (typically ${user.home}/.ssh/config) defining the username and keyfile to be used per host.
* \"legacy-xml\" formatter of junitlauncher task wasn\'t writing out exceptions that happen in AATTBeforeAll method of a test.
* Fixes a potential ConcurrentModificationException in XMLLogger.
* Fixes a bug in junitlauncher task in forked mode, where if a listener element was used as a sibling element for either the test or testclasses element, then the forked mode launch would fail.
* Fixes an issue in AntStructure where an incorrect DTD was being generated.
* Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
* The runant.py script should now work with Python 3.
* rmic has been removed from Java 15. The task will now throw an exception if you try to use it while running Java 15 or newer.- Remove ant-python3.patch fixed upstream
* Wed May 06 2020 Pedro Monreal Gonzalez - Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]
* Wed May 06 2020 Pedro Monreal Gonzalez - Remove jakarta-commons-
* dependencies [bsc#1133997]
* Use apache-commons-logging and apache-commons-net in optional tasks
* Tue Jan 14 2020 Fridrich Strba - Use xml-commons-apis-bootstrap as jar in classpath instead of the common xml-apis jar, since we are forcing build against the bootstrap package
* Fri Nov 08 2019 Fridrich Strba - Upgrade to upstream version 1.10.7- Modified patches:
* apache-ant-bootstrap.patch
* apache-ant-no-test-jar.patch
* apache-ant-xml-apis.patch
* reproducible-build-manifest.patch + rediff- Fix ant-xz.jar to be non-empty and split it from the ant-antlr package