-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 7 Sep 2023 21:18:14 CEST Source: openrefine Architecture: source Version: 3.6.2-2~bpo11+1 Distribution: bullseye-backports Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Markus Koschany <apo@debian.org> Checksums-Sha1: 76df56be5d00c4d6cb70d02a782f93f2b4adca28 3641 openrefine_3.6.2-2~bpo11+1.dsc cc14eb4020c19546817ce250a522670e55d03bbe 7064104 openrefine_3.6.2.orig.tar.xz b0b1d838f31610279a6243c96a19be783969f0ee 309632 openrefine_3.6.2-2~bpo11+1.debian.tar.xz 61211fbc369f65168bda911c2edd1da916e312c7 18274 openrefine_3.6.2-2~bpo11+1_amd64.buildinfo Checksums-Sha256: 24f77d4f865173b671ee6dee878e1f3032ac1886e4b577e0e95b49258319bfcf 3641 openrefine_3.6.2-2~bpo11+1.dsc ab3aae5f751211cd39a1103184efae8853830c3cebb889ca9db6f906cc63f4ff 7064104 openrefine_3.6.2.orig.tar.xz 50fb545523e17d2dbc3b0a0368c8213b67528dad616577af709c81489766feba 309632 openrefine_3.6.2-2~bpo11+1.debian.tar.xz 579efadcbcae07a1ca738282951a647ffe7ecbda8122f3da81868b66562690fa 18274 openrefine_3.6.2-2~bpo11+1_amd64.buildinfo Closes: 1022760 1022761 1033355 1041422 Changes: openrefine (3.6.2-2~bpo11+1) bullseye-backports; urgency=medium . * Rebuild for bullseye-backports. . openrefine (3.6.2-3) unstable; urgency=medium . * Tighten B-D on commons-io to >= 2.11.0. * Fix CVE-2023-37476 and automatically refresh all other patches. OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. (Closes: #1041422) * Declare compliance with Debian Policy 4.6.2. . openrefine (3.6.2-2) unstable; urgency=medium . * Depend on libjoda-time-java and liboro-java. Thanks to Robert Jäschke for the report! (Closes: #1022760) * Load the refine configuration before parsing the command line options. Thanks to Robert Jäschke for the report! (Closes: #1033355) * Symlink commons-lang-2.6 into server directory to fix another ClassNotFound exception. . openrefine (3.6.2-1) unstable; urgency=medium . * New upstream version 3.6.2. (Closes: #1022761) * Add 3rdparty missing sources. (Closes: #1022760) These Javascript files are currently missing from the original sources because they are downloaded separately with npm. * Tighten dependency on librhino-java to >= 1.7.14. Otherwise there was a silent error in the web application which made it unusable. * Link titanium-json-ld into webapp directory. . openrefine (3.6.1-1) unstable; urgency=medium . * New upstream version 3.6.1. * Refresh all patches except of javalamp patch. * Tighten dependency on apache-jena and wikidata toolkit. * Depend on liblanguage-detector-java. * Add gdata-extension.patch. * Declare compliance with Debian Policy 4.6.1. . openrefine (3.5.2-2) unstable; urgency=medium . * Build-depend on libokhttp-java (>= 3.13.1-3~) * Tighten dependency on libgoogle-api-client-java. * Remove dependency on tomcat9 because the tomcat9-annotations-api is apparently not required. * Update the Dockerfile and add a README file to document how to build the image and run the container. Install both files as examples into /usr/share/doc/openrefine/examples. Files: 0f9edef3394b9224411bdf1c3beeca5d 3641 java optional openrefine_3.6.2-2~bpo11+1.dsc 376af8bed8b467263bd556c710fb30d2 7064104 java optional openrefine_3.6.2.orig.tar.xz 8d06aa59ba59fa9cf58270f0960c75a4 309632 java optional openrefine_3.6.2-2~bpo11+1.debian.tar.xz 0e0dbdab7cb71eed742aa01ae521126d 18274 java optional openrefine_3.6.2-2~bpo11+1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAmT6IfpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hka0MP/Ap/cP43LGjcYBR6DvaSF7c2Jpg/RjdppeCP 7Xh4JpojMaQwAQZl0MVEnQQE7WVkFHdef4J8CkOQxS+plZNZmiDmoIiDJrGj+oXl 5p80oAyWQW0mfTDM4YhDMUI4R3HmkawO532w+vssb7MjhUqjX+nSkOvpaEnDRZJ2 DtK0mzN3JWsXXx6qShoPk+XoLSD5irZQ/E+I0jbajG2jxjMP/oDNlOOsQrWwsoW6 1tPCZni2JBjw/vbYQWzE/mWKDeA/4rr977hpW7b9nmHZWzX3jhtgXP5dK5npQUa7 tmlekh+U49p974++ge73fmABQdqO9QuD9JuL4XhmJyLbsdT+ONo0jT/89FklwxBo +BExoJv0w6qfiCqDBdy4kIqmMkeJASe8o3NcB8HQ9tfeXHjoys0vfiPbeNJcrMQr hg5pPfIO/weCwNi1WFoMwztxwBu/nAv1gsTcskvOw6oL3034kcNcuycDlbDQFj+4 mWvKEjrK/DcyQ4uMTgm8aFcBbAt6/sxFlKFhUGFqJhYVC/u7zeynCLY7drjAVaFF 1FieQP87gI9zAIW+Km3RTr/CmdquScMHeirpXHZhjXpnWEzvLUTRvPP/cQoAC1MU 4iF0Ha14nB3Qd111odx7GlOtp8zVqPbhYxTUSfnvTwivNKEIXd/Vgq7Uk3JsTLMZ 9ThpTXVA =0M3s -----END PGP SIGNATURE-----
