Sync from SUSE:SLFO:Main apache-commons-configuration2 revision ecf889dde807f9435f293655a0125d70

apache-commons-configuration2-build.xml

@@ -17,8 +17,8 @@
   <property name="project.groupId" value="org.apache.commons"/>
   <property name="project.artifactId" value="commons-configuration2"/>
 
-  <property name="spec.version" value="2.9"/>
-  <property name="project.version" value="${spec.version}.0"/>
+  <property name="spec.version" value="2.10"/>
+  <property name="project.version" value="${spec.version}.1"/>
   <property name="bundle.version" value="${project.version}"/>
 
   <property name="project.name" value="Apache Commons Configuration"/>

apache-commons-configuration2.changes

@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Fri Mar 22 11:28:25 UTC 2024 - Gus Kenion <gus.kenion@suse.com>
+
+- Upgrade to version 2.10.1
+  * Fixed Bugs:
+    + java.lang.module.FindException: Module servlet.api not found.
+      Fixes CONFIGURATION-839.
+    + StackOverflowError adding property in
+      AbstractListDelimiterHandler.flattenIterator(). Fixes
+      CONFIGURATION-840. (bsc#1221797, CVE-2024-29131)
+    + StackOverflowError calling
+      ListDelimiterHandler.flatten(Object, int) with a cyclical
+      object tree. Fixes CONFIGURATION-841. (bsc#1221793,
+      CVE-2024-29133)
+- Incldes changes from version 2.10.0
+  * New features:
+    +  [StepSecurity] ci: Harden GitHub Actions #307.
+    +  ConfirgurationPropertySource doesn't supply resolved values
+       #309. Fixes CONFIGURATION-834.
+    +  Take prefix delimiter into account when
+       SubsetConfiguration.getKeysInternal() is called #300.
+    +  Guard ConfigurationMap against null configuration #355.
+    +  Properties parser stack overflows on large single-key inputs
+       #369. Fixes CONFIGURATION-838.
+    +  DatabaseConfiguration.AbstractJdbcOperation.execute() throws
+       NullPointerException when no data source is set #368.
+  * Fixed Bugs:
+    +  Add AbstractConfiguration.getKeysInternal(String, String)
+       #300.
+    +  Add ImmutableConfiguration.getKeys(String, String) #300.
+    +  Add
+       PrefixedKeysIterator.PrefixedKeysIterator(Iterator<String%gt;,
+       String, String) #300.
+    +  Add Maven property project.build.outputTimestamp for build
+       reproducibility.
+    +  Guard PatternSubtreeConfigurationWrapper constructor against
+       null #365.
+
 -------------------------------------------------------------------
 Sat Sep 23 17:19:23 UTC 2023 - Fridrich Strba <fstrba@suse.com>
 

apache-commons-configuration2.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package apache-commons-configuration2
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %global base_name       configuration2
 %global short_name      commons-%{base_name}
 Name:           apache-commons-configuration2
-Version:        2.9.0
+Version:        2.10.1
 Release:        0
 Summary:        Java library providing a generic Configuration interface
 License:        Apache-2.0