Changelog for xstream-1.4.10-lp151.4.1.noarch.rpm :

* Tue Mar 05 2019 Frantisek Kobzik - Update xstream to 1.4.10 Added:
* xstream_1_4_10-jdk11.patch
* xstream_1_4_10-buildsh-sle12.patch
* xstream-XSTREAM_1_4_10.tar.gz Removed:
* 0001-Prevent-deserialization-of-void.patch
* xstream-XSTREAM_1_4_9.tar.gz
* xstream-XSTREAM_1_4_9-jdk11.patch- Major changes:- New XStream artifact with -java7 appended as version suffix for a library explicitly without the Java 8 stuff (lambda expression support, converters for java.time.
* package).- Fix PrimitiveTypePermission to reject type void to prevent CVE-2017-7957 with an initialized security framework.- Improve performance by minimizing call stack of mapper chain.- XSTR-774: Add converters for types of java.time, java.time.chrono, and java.time.temporal packages (converters for LocalDate, LocalDateTime, LocalTime, OffsetDateTime, and ZonedDateTime by Matej Cimbora).- JavaBeanConverter does not respect ignored unknown elements.- Add XStream.setupDefaultSecurity to initialize security framework with defaults of XStream 1.5.x.- Emit error warning if security framework has not been initialized and the XStream instance is vulnerable to known exploits.
* Tue Feb 05 2019 michele.bolognaAATTsuse.com- Feat: modify patch to be compatible with JDK 11 building Added:
* xstream-XSTREAM_1_4_9-jdk11.patch Removed:
* xstream-XSTREAM_1_4_9-jdk9.patch
* Tue Dec 11 2018 moioAATTsuse.com- fixes for SLE 15 compatibility
* Fri Dec 01 2017 mcAATTsuse.com- fix possible Denial of Service when unmarshalling void. (CVE-2017-7957, bsc#1070731) Added:
* 0001-Prevent-deserialization-of-void.patch
* Tue Nov 07 2017 jgonzalezAATTsuse.com- Fix build for JDK9- Disable javadoc generation (broken for SLE15 and Tumbleweed)- Add:
* xstream-XSTREAM_1_4_9-jdk9.patch- Changed:
* build.sh
* Tue Apr 05 2016 moioAATTsuse.com- Require building on Java 8, otherwise the LambdaMapper class is skipped (issue 30)
* Tue Mar 29 2016 moioAATTsuse.com- Upgrade to version 1.4.9, which fixes CVE-2016-3674 (bsc#972950)
* Tue Nov 10 2015 moioAATTsuse.com- Initial version