You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by ma...@apache.org on 2014/02/06 17:48:56 UTC
svn commit: r1565338 - in /commons/proper/fileupload/trunk:
RELEASE-NOTES.txt src/changes/changes.xml src/changes/release-notes.vm
Author: markt
Date: Thu Feb 6 16:48:55 2014
New Revision: 1565338
URL: http://svn.apache.org/r1565338
Log:
Take advantage of automating the generation of the release notes. Copied from Commons POOL.
Added:
commons/proper/fileupload/trunk/src/changes/release-notes.vm
- copied, changed from r1565183, commons/proper/pool/trunk/src/changes/release-notes.vm
Modified:
commons/proper/fileupload/trunk/RELEASE-NOTES.txt
commons/proper/fileupload/trunk/src/changes/changes.xml
Modified: commons/proper/fileupload/trunk/RELEASE-NOTES.txt
URL: http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/RELEASE-NOTES.txt?rev=1565338&r1=1565337&r2=1565338&view=diff
==============================================================================
--- commons/proper/fileupload/trunk/RELEASE-NOTES.txt (original)
+++ commons/proper/fileupload/trunk/RELEASE-NOTES.txt Thu Feb 6 16:48:55 2014
@@ -1,44 +1,33 @@
-<!--
- Licensed to the Apache Software Foundation (ASF) under one or more
- contributor license agreements. See the NOTICE file distributed with
- this work for additional information regarding copyright ownership.
- The ASF licenses this file to You under the Apache License, Version 2.0
- (the "License"); you may not use this file except in compliance with
- the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
--->
+ Apache Commons FileUpload 1.3.1 RELEASE NOTES
-The Apache Commons FileUpload team is pleased to announce the Apache Commons
-FileUpload 1.3.1 release!
+The Apache Commons FileUpload team is pleased to announce the release of Apache Commons FileUpload 1.3.1.
The Apache Commons FileUpload component provides a simple yet flexible means of
adding support for multipart file upload functionality to servlets and web
-applications.
+applications. Version 1.3 onwards requires Java 5 or later.
No client code changes are required to migrate from version 1.3.0 to 1.3.1.
+This is a security and maintenance release that includes an important security
+fix as well as a small number of bugfixes.
+
Changes in version 1.3.1 include:
+
Fixed Bugs:
-o SECURITY - CVE-2014-0050. Specially crafted input can trigger a DoS if the
- buffer used by the MultipartStream is not big enough. When constructing
- MultipartStream enforce the requirements for buffer size by throwing an
- IllegalArgumentException if the requested buffer size is too small. This
- prevents the DoS.
-o When deserializing DiskFileItems ensure that the repository location, if
- any, is a valid one. Thanks to Arun Babu Neelicattu.
-o Correct example in usage documentation so it compiles.
+o SECURITY - CVE-2014-0050. Specially crafted input can trigger a DoS if the
+ buffer used by the MultipartStream is not big enough. When constructing
+ MultipartStream enforce the requirements for buffer size by throwing an
+ IllegalArgumentException if the requested buffer size is too small. This
+ prevents the DoS.
+o When deserializing DiskFileItems ensure that the repository location, if
+ any, is a valid one. Thanks to Arun Babu Neelicattu.
+o Correct example in usage documentation so it compiles.
-Have fun!
--Apache Commons FileUpload team
+For complete information on Apache Commons FileUpload, including instructions on how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Apache Commons FileUpload website:
+http://commons.apache.org/proper/commons-fileupload/
Modified: commons/proper/fileupload/trunk/src/changes/changes.xml
URL: http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/src/changes/changes.xml?rev=1565338&r1=1565337&r2=1565338&view=diff
==============================================================================
--- commons/proper/fileupload/trunk/src/changes/changes.xml (original)
+++ commons/proper/fileupload/trunk/src/changes/changes.xml Thu Feb 6 16:48:55 2014
@@ -43,7 +43,9 @@ The <action> type attribute can be add,u
</properties>
<body>
- <release version="1.3.1" description="maintenance release" date="TBD">
+ <release version="1.3.1" description=
+"This is a security and maintenance release that includes an important security
+fix as well as a small number of bugfixes." date="TBD">
<action dev="markt" type="fix">
SECURITY - CVE-2014-0050. Specially crafted input can trigger a DoS if the
buffer used by the MultipartStream is not big enough. When constructing
Copied: commons/proper/fileupload/trunk/src/changes/release-notes.vm (from r1565183, commons/proper/pool/trunk/src/changes/release-notes.vm)
URL: http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/src/changes/release-notes.vm?p2=commons/proper/fileupload/trunk/src/changes/release-notes.vm&p1=commons/proper/pool/trunk/src/changes/release-notes.vm&r1=1565183&r2=1565338&rev=1565338&view=diff
==============================================================================
--- commons/proper/pool/trunk/src/changes/release-notes.vm (original)
+++ commons/proper/fileupload/trunk/src/changes/release-notes.vm Thu Feb 6 16:48:55 2014
@@ -18,13 +18,12 @@
The ${developmentTeam} is pleased to announce the release of ${project.name} ${version}.
-Apache Commons Pool provides an object-pooling API and a number of object pool implementations.
-Version 2 contains a completely re-written pooling implementation compared to the 1.x series.
-In addition to performance and scalability improvements, version 2 includes robust instance
-tracking and pool monitoring. Version 2 requires JDK level 1.6 or above.
+The Apache Commons FileUpload component provides a simple yet flexible means of
+adding support for multipart file upload functionality to servlets and web
+applications. Version 1.3 onwards requires Java 5 or later.
+
+No client code changes are required to migrate from version 1.3.0 to 1.3.1.
-No client code changes are required to migrate from version 2.0 to 2.1. Users of version 1.x
-should consult the migration guide on the Commons Pool web site.
## N.B. the available variables are described here:
## http://maven.apache.org/plugins/maven-changes-plugin/examples/using-a-custom-announcement-template.html
@@ -112,5 +111,3 @@ For complete information on ${project.na
patches, or suggestions for improvement, see the Apache ${project.name} website:
${project.url}
-
-