Sync commons-configuration2 2.7-2 (universe) from Debian unstable (main)

Bug #1869654 reported by Amr Ibrahim
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
commons-configuration2 (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync commons-configuration2 2.7-2 (universe) from Debian unstable (main)

It fixs a security bug CVE-2020-1953.

Changelog entries since current focal version 2.2-1:

commons-configuration2 (2.7-2) unstable; urgency=medium

  * Team upload.
  * Add commons-text.jar to the CLASSPATH. Without commons-text.jar packages like MediathekView will not work any more. (Closes: #955755)

 -- Markus Koschany <email address hidden> Sun, 05 Apr 2020 15:33:44 +0200

commons-configuration2 (2.7-1) unstable; urgency=medium

  * Team upload
  * Update debian/watch to repack as .xz and use https URL
  * New upstream version 2.7, CVE-2020-1953 (Closes: #954713)
  * Specify debhelper compat 12 via debhelper-compat dependency
  * Add build-dep on libcommons-text-java
  * Remove get-orig-source target from debian/rules
  * Set source and target in maven.properites to Java 8
  * Specify debhelper compat 12 via debhelper-compat dependency
  * Add build-dep on libcommons-text-java
  * Remove get-orig-source target from debian/rules
  * Set source and target in maven.properites to Java 8
  * Set "Rules-Requires-Root: no" in debian/control
  * Bump Standards-Version to 4.5.0
  * Freshen years in debian/copyright
  * Update Vcs URLs to point to Salsa
  * Ship NOTICE.txt with binary package

 -- tony mancill <email address hidden> Sat, 28 Mar 2020 21:32:41 -0700

CVE References

summary: - Sync commons-configuration2 2.7-1 (universe) from Debian unstable (main)
+ Sync commons-configuration2 2.7-2 (universe) from Debian unstable (main)
description: updated
Mathew Hodson (mhodson)
Changed in commons-configuration2 (Ubuntu):
importance: Undecided → Wishlist
Changed in commons-configuration2 (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.