Changelog for ant-apache-log4j-1.10.13-2.2.noarch.rpm :

* Thu Jan 26 2023 Fridrich Strba - Package and distribute the new ant-jakartamail
* Wed Jan 18 2023 David Anes - Update ant keyring with new developer keys.- Update to 1.10.13:
* Breaking changes: - has a new attribute authenticateOnRedirect that can be used to prevent Ant from sending the configured credentials when following a redirect. It is false by default, which means builds that rely on credentials being used on the redirected URI may break.
* Fixed bugs: - the PropertyEnumerator change introduced in 1.10.9 proved to be not fully backwards compatible when combined with certain custom PropertyHelper implementations - for example when using AntXtras. - legacy-xml reporter of the junitlauncher task now escapes ]]> when writing CDATA. - may leak connections when trying to preserve the last modified timestamps of files transferred recursively from a server. - tstamp task would in certain cases parse the SOURCE_DATE_EPOCH environment variable value to an incorrect date. This has now been fixed. - fetch.xml didn\'t set up non-default repositories propery and thus failed to download JAI. - When building and installing Ant distribution from source, the build script would change permissions on unrelated files in the destination directory. This is now fixed and such unrelated files in the destination directory will be left untouched. - parsing tar entries with multiple NUL bytes in their name would include garbage bytes as the name included all bytes up to the last NUL rather than the first. - loadresource might log warnings even though quiet was set to true - javac task would add paths constructs containing wildcards to the internally created argument file where wildcards are not allowed
* Other changes: - added an implementation of the MIME Mail sender based on the repackaged Jakarta Mail package rather than javax Mail. - The \"listener\" element in the junitlauncher task now supports an \"extension\" attribute to control the filename extension of the generated output file from the listener. - now supports FTPs. - DirectoryScanner avoids listing directory contents when it known it will never use the information retrieved. This may improve performance in some special cases. - will now create the parent directory of the manifestFile attribute if it doesn\'t exist. - org.apache.tools.ant.BuildLogger now has a new method getMessageOutputLevel() which returns the currently set message output level.
* Mon May 09 2022 Fridrich Strba - Disable a test failing to compile with junit5 5.8.x
* Tue Feb 22 2022 Fridrich Strba - Do not build against the log4j12 packages, use the new reload4j
* Wed Dec 15 2021 David Anes - Update to 1.10.12:
* The update includes fixes for the following CVEs: CVE-2021-36374, bsc#1188469 Excessive memory allocation when reading a specially crafted ZIP archive or a derived formats. CVE-2021-36373, bsc#1188468 Excessive memory allocation when reading a specially crafted TAR archive.
* The http condition would follow redirects even when \"followRedirects\" attribute was set to \"false\". This has now been fixed. Bugzilla Report 65489
* Made sure setting build.compiler to the fully qualified classname that corresponds to extJavac or modern has the same effect as using the shorter alias names. Bugzilla Report 65539
* Prevent potential deadlocks in org.apache.tools.ant.IntrospectionHelper. Bugzilla Report 65424
* The implementation of AntClassLoader#findResources() has been changed to optimize it for potential performance issues, as those noted at https://issues.jenkins.io/browse/JENKINS-22310?focusedCommentId=197405&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-197405 Github Pull Request #151
* AntClassLoader now implements the ClassLoader#findResource(String) method. Github Pull Request #150
* Ant tries to avoid file name canonicalization when possible. Bugzilla Report 65499
* javadoc task will now look for warning messages in the STDERR stream too when \"failonwarning\" is set to true to account for changes in JDK 17+
* The tar task now preserves symlinks of nested tarfilesets. Github Pull Request #142- Changes from 1.10.11:
* a race condition could lead to NullPointerExceptions when running tasks in parallel. Bugzilla Report 65316
* fixed potential OutOfMemory errors when reading broken archives using the tar or zip formats or formats derived from zip.
* org.apache.tools.ant.taskdefs.optional.junitlauncher.confined.JUnitLauncherTask now has a new protected createExecuteWatchdog() method for allowing it to be overriden. Github Pull Request #147
* Upgraded AntUnit to 1.4.1.
* Thu Jun 03 2021 Pedro Monreal - Update to 1.10.10
* SCP (with sftp=true) task would fail if fetching file located in root directory.
* Fixed: javac task would fail if the arguments file it (internally) created didn\'t quote the # character.
* Make sure LegacyXmlResultFormatter encodes characters illegal in XML the same way JUnit5\'s built-in formatter would.
* LegacyXmlResultFormatter no longer double-encodes <>& in system-err and system-out.
* Fixes a bug in junitlauncher task\'s legacy-xml formatter, where the testcase representing a AATTParameterized JUnit4 test wasn\'t being reported in the XML.
* Fixes a bug where the ant-testutil-sources.jar that gets published to Maven central repository didn\'t contain any source files.
* The condition didn\'t follow redirects from http to https.
* ZipOutputStream now overrides write(int) in order to make sure single byte writes get the same treatment as array writes.
* Fixes a potential deadlock in junitlauncher task when using legacy-xml reporter.
* javaversion condition now has a new \"atmost\" attribute. See the javaversion manual for more details
* The \"listener\" nested element of the \"junitlauncher\" task now has a new \"useLegacyReportingName\" attribute which can be used to control the test identifiers names that get reported by the listener. See the junitlauncher manual for more details. Note that this change also introduces a new \"setUseLegacyReportingName\" method on the org.apache.tools.ant.taskdefs.optional.junitlauncher.TestResultFormatter interface. This will break backward compatibility with any of your custom result formatters which implemented this interface and such implementations are now expected to implement this new method.
* A new attribute preserveduplicates allows to return the same resource multiple times when set to true.
* A new attribute filterbeforeconcat in can be used to decide whether the filterchain should be applied to the concatenated content (the default) or each nested resource individually before concatenating them.
* The ssh tasks now share a new nested element additionalConfig that can be used to set config values for the jsch Session used by the task.
* Added new discardOutput and discardError properties to redirector and the exec, apply and java tasks which can be used to completely discard any (error) output. This is a platform independent alternative to directiong output to any kind of null device.
* junitlauncher now prints a more useful and instantaneous summary of tests being run, closely matching the junit task\'s summary.
* Thu Oct 01 2020 Pedro Monreal - Update to 1.10.9
* Security fix: [bsc#1177180, CVE-2020-11979] - Insecure temporary file vulnerability
* Fixed bugs: - The ftp task could throw a NullPointerException if an error occured. - Propertyset now also sees in-scope local properties. - Replaced ReaderInputStream with the version of Apache Commons IO due to problems with surrogate pairs. - will no longer remove the temporary file it just created before writing to it. - and didn\'t deal with wildcard hostnames in shs config files properly.
* Other changes: - Ant will no longer log a warning if it doesn\'t find tools.jar. - The task accepts now a nested element that can be used to perform custom filename transformations for the archives. - Added a new PropertyEnumerator interface that extensions can provide if they are managing properties unknown to the Ant project. - Added some special code to support GraalVM JavaScript as javax.script scripting engine for JavaScript. In particular we relax some security settings of GraalVM so that scripts can access Ant objects. - Also Ant enables Nashorn compatibility mode by default, you can disable that by setting the magic Ant property ant.disable.graal.nashorn.compat to true. - If the magic property ant.tmpdir hasn\'t been set and Ant can control the permissions of directories it creates it will create an owner-owned temporary directory unaccessible to others as default tempdir as soon as a temporary file is created for the first time.
* Thu May 14 2020 Pedro Monreal Gonzalez - Update to 1.10.8
* Security fix: [CVE-2020-1945, bsc#1171696] - A new property ant.tmpdir provides improved control over the location Ant uses to create temporary files
* sshexec failed to write output to a file if the file didn\'t exist
* Fixes a regression in javac task involving command line argument files.
* sshexec, sshsession and scp now support a new sshConfig parameter. It specified the SSH configuration file (typically ${user.home}/.ssh/config) defining the username and keyfile to be used per host.
* \"legacy-xml\" formatter of junitlauncher task wasn\'t writing out exceptions that happen in AATTBeforeAll method of a test.
* Fixes a potential ConcurrentModificationException in XMLLogger.
* Fixes a bug in junitlauncher task in forked mode, where if a listener element was used as a sibling element for either the test or testclasses element, then the forked mode launch would fail.
* Fixes an issue in AntStructure where an incorrect DTD was being generated.
* Fixes an incorrect variable name usage in junit-frames-xalan1.xsl.
* The runant.py script should now work with Python 3.
* rmic has been removed from Java 15. The task will now throw an exception if you try to use it while running Java 15 or newer.- Remove ant-python3.patch fixed upstream
* Wed May 06 2020 Pedro Monreal Gonzalez - Add rhino to the ant-apache-bsf optional tasks [bsc#1134001]
* Wed May 06 2020 Pedro Monreal Gonzalez - Remove jakarta-commons-
* dependencies [bsc#1133997]
* Use apache-commons-logging and apache-commons-net in optional tasks
* Tue Jan 14 2020 Fridrich Strba - Use xml-commons-apis-bootstrap as jar in classpath instead of the common xml-apis jar, since we are forcing build against the bootstrap package
* Fri Nov 08 2019 Fridrich Strba - Upgrade to upstream version 1.10.7- Modified patches:
* apache-ant-bootstrap.patch
* apache-ant-no-test-jar.patch
* apache-ant-xml-apis.patch
* reproducible-build-manifest.patch + rediff- Fix ant-xz.jar to be non-empty and split it from the ant-antlr package
* Tue Oct 01 2019 Fridrich Strba - Build against the new compatibility packages log4j12/log4j12-mini
* Mon Sep 30 2019 Fridrich Strba - Remove references to parent poms from all artifacts and do not distribute the ant-parent, since we don\'t need it
* Tue Apr 09 2019 Fridrich Strba - Require directly xerces-j2 and not its virtual provide jaxp_parser_impl
* Mon Mar 18 2019 Jan Engelhardt - Make \"if\" statements in build recipe POSIX sh compatible.
* Fri Feb 08 2019 Fridrich Strba - Create an ant-junit5 package to build junit5 optional tasks when they become resolved- Add a simple pom file for ant-bootstrap.jar
* Fri Feb 08 2019 Fridrich Strba - Add compatibility links ant/ant
*.jar for bootstrap build
* Tue Feb 05 2019 Fridrich Strba - BuildRequire hamcrest for ant-junit and ant-antlr, since junit4 depends strictly on hamcrest-core only.
* Fri Feb 01 2019 Fridrich Strba - Build ant against xml-commons-apis-bootstrap and xml-commons-resolver-bootstrap in order to break build cycle