Changelog for xmlgraphics-batik-css-1.18-108.2.noarch.rpm :

* Sat Oct 12 2024 Fridrich Strba - Update to version 1.18
* Needed by xmlgraphics-fop 2.10
* Changes + BATIK-1225: PNG transcoder references nonexistent class + BATIK-1285: Set offset to 0 if missing in stop tag + BATIK-1318: Validate throws NPE + BATIK-1355: Missing arabic characters + BATIK-1361: Animated rotate tranform ignores y-origin at exactly 270 degrees + BATIK-1362: Set an automatic module name + BATIK-1363: Ignore inkscape properties + BATIK-1364: Switch to spotbugs + FOP-3135: Allow source and target resolution configuration- Removed patch:
* 0001-Fix-imageio-codec-lookup.patch + fixed upstream
* Thu Sep 19 2024 Fridrich Strba - Specify a reproducible build.id- Clean the spec file and modernize it a bit
* Fri Mar 01 2024 Fridrich Strba - Upgrade to version 1.17
* BATIK-1346: Allow configuration of rhino whitelist
* BATIK-1347: Switch to empty whitelist for rhino (CVE-2022-44730)
* BATIK-1349: Block loading external resource by default (CVE-2022-44729)- Upgrade to version 1.16
* Java 8 or later is minimum runtime required
* BATIK-1338: Block loading jar inside svg (CVE-2022-41704, bsc#1204704)
* BATIK-1345: Restrict what java classes can be run thru rhino (CVE-2022-42890, bsc#1204709)- Removed patch:
* xmlgraphics-batik-nosourcetarget.patch + not needed since Java 8 compatibility is now the default
* Thu Feb 29 2024 Fridrich Strba - Allow building with this spec-file on systems that don\'t have the mvn_install_pom macros defined and release version requirement of javapackages-local- Require the xmlgraphics-commons, xml-commons-apis a rhino by their names, since they are on the classpath by their location in the scripts. Require them in the subpackages that contain the scripts.- Require javapackages-tools in subpackages that contain scripts created by jpackage_script macro. The scripts need functions from javapackages-tools
* Wed Feb 21 2024 Gus Kenion - Use %patch -P N instead of deprecated %patchN.
* Wed Oct 25 2023 Fridrich Strba - Build with source and target levels 8- Added patch:
* xmlgraphics-batik-nosourcetarget.patch + do not hardcode source/target 1.7
* Wed Jun 28 2023 Fridrich Strba - Remove the optional dependency on jython
* fixes new build cycles
* Fri Sep 23 2022 Fridrich Strba - Upgrade to version 1.15
* BATIK-1260: Java 11 module error
* BATIK-1321: Remove Xerces
* BATIK-1299: Batik-all jar has all classes so should not pull other jars also
* BATIK-1329: Remove xalan
* BATIK-1331, bsc#1203674, CVE-2022-38398: Jar url should be blocked by DefaultExternalResourceSecurity
* BATIK-1333, bsc#1203673, CVE-2022-38648: Block external resource before calling fop
* BATIK-1335, bsc#1203672, CVE-2022-40146: Jar url should be blocked by DefaultScriptSecurity
* Sun Mar 20 2022 Fridrich Strba - Build with source/target levels 8
* Tue Feb 02 2021 Jan Engelhardt - Set buildshell to bash for \"<<<\".
* Sun Jan 24 2021 Fridrich Strba - Upgrade to version 1.14
* Fixes bsc#1182748, CVE-2020-11987
* BATIK-1284: Dont load DTDs in NodePickerPanel
* BATIK-1292: Remove console message \"About to transcoder source of type: ...\"