plexus-archiver (1.2-1+deb8u1build0.14.04.1) trusty-security; urgency=medium

  * fake sync from Debian

 -- Mike Salvatore <mike.salvatore@canonical.com>  Fri, 09 Nov 2018 11:18:57 -0500

plexus-archiver (1.2-1+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fail when trying to extract outside of dest dir (CVE-2018-1002200)
    Fixes arbitrary file write vulnerability using a specially crafted zip
    file. (Closes: #900953)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sun, 10 Jun 2018 21:17:18 +0200

plexus-archiver (1.2-1) unstable; urgency=low

  * Team upload.
  * New upstream release
  * debian/control:
    - Use canonical URLs for the Vcs-* fields
    - Updated Standards-Version to 3.9.4 (no changes)
  * Bump to debhelper 9 compat level
  * debian/rules: Improved the clean target
  * debian/watch: Updated to watch the new release tags on Github
  * Removed debian/orig-tar.sh and use the tarball from Github directly

 -- Emmanuel Bourg <ebourg@apache.org>  Tue, 22 Oct 2013 12:11:28 +0200

plexus-archiver (1.0~alpha12-3) unstable; urgency=low

  * Add myself to Uploaders.
  * Bump Standards-Version to 3.9.2: no changes needed.
  * Fix FTBFS: remove version param (deprecated in debian-ant-helper)
    and use POM version (Closes: #628337).
  * Use mh_clean in clean rule.
  * Bump to debhelper 7 compat level.
  * Switch to source format 3.0 (quilt).

 -- Damien Raude-Morvan <drazzib@debian.org>  Sun, 29 May 2011 13:33:38 +0200

plexus-archiver (1.0~alpha12-2) unstable; urgency=low

  * Fix versions in the POM

 -- Ludovic Claude <ludovic.claude@laposte.net>  Thu, 09 Jul 2009 21:34:25 +0100

plexus-archiver (1.0~alpha12-1) experimental; urgency=low

  * New upstream release, add myself to Uploaders
  * Change section to java
  * Add the Maven POM to the package,
  * Add a Build-Depends-Indep dependency on maven-repo-helper
  * Use mh_installpom and mh_installjar to install the POM and the jar to the
    Maven repository
  * Remove the patch for the POM as it's no longer needed
  * Remove the dependency on java2-runtime and default-java as this is a library
  * Remove the Build dependency on quilt as it's no longer needed

 -- Ludovic Claude <ludovic.claude@laposte.net>  Thu, 19 Mar 2009 20:08:20 +0000

plexus-archiver (1.0~alpha10-2) unstable; urgency=low

  * Change Depends: default-java to default-jre.

 -- Torsten Werner <twerner@debian.org>  Fri, 26 Dec 2008 10:28:05 +0100

plexus-archiver (1.0~alpha10-1) unstable; urgency=low

  * Initial release. (Closes: #475780)

 -- Torsten Werner <twerner@debian.org>  Tue, 09 Dec 2008 20:13:45 +0100
