Hello community, here is the log from the commit of package jakarta-taglibs-standard for openSUSE:Factory checked in at 2015-10-08 08:24:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jakarta-taglibs-standard (Old) and /work/SRC/openSUSE:Factory/.jakarta-taglibs-standard.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "jakarta-taglibs-standard" Changes: -------- --- /work/SRC/openSUSE:Factory/jakarta-taglibs-standard/jakarta-taglibs-standard.changes 2014-07-22 06:57:54.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.jakarta-taglibs-standard.new/jakarta-taglibs-standard.changes 2015-10-08 08:24:52.000000000 +0200 @@ -1,0 +2,7 @@ +Tue Oct 6 09:00:42 UTC 2015 - tchvatal@suse.com + +- Update URL to link to live domain +- Fix bnc#920813 CVE-2015-0254, patch taken from debian: + * CVE-2015-0254.patch + +------------------------------------------------------------------- New: ---- CVE-2015-0254.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jakarta-taglibs-standard.spec ++++++ --- /var/tmp/diff_new_pack.bV54v8/_old 2015-10-08 08:24:53.000000000 +0200 +++ /var/tmp/diff_new_pack.bV54v8/_new 2015-10-08 08:24:53.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package jakarta-taglibs-standard # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -23,12 +23,13 @@ Summary: Open Source Implementation of the JSP Standard Tag Library License: Apache-2.0 Group: Development/Libraries/Java -Url: http://jakarta.apache.org/taglibs/ +Url: http://tomcat.apache.org/taglibs/ Source0: jakarta-taglibs-standard-%{version}-src.tar.bz2 Patch0: %{name}-%{version}-build.patch Patch1: %{name}-java6-compatibility.patch Patch2: %{name}-%{version}-remove-enums.patch Patch3: jakarta-taglibs-standard-java7.patch +Patch4: CVE-2015-0254.patch BuildRequires: ant BuildRequires: java-devel BuildRequires: servletapi5 @@ -57,6 +58,7 @@ %patch1 -b .sav1 %patch2 -b .sav2 %patch3 -p1 +%patch4 -p1 cat > build.properties <<EOBP build.dir=build ++++++ CVE-2015-0254.patch ++++++ ++++ 2265 lines (skipped)