-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 22 Oct 2026 11:48:31 +0200 Source: commons-configuration2 Architecture: source Version: 2.15.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 1136705 Changes: commons-configuration2 (2.15.1-1) unstable; urgency=medium . * New upstream release - Fixes CVE-2026-45205: StackOverflowError on YAML input with cycles (Closes: #1136705) - New dependencies on libcommons-io-java and libjakarta-servlet-api-java - Ignore the httpcore-nio and junit-pioneer dependencies * Standards-Version updated to 4.7.4 * Removed the Priority field * Removed the Rules-Requires-Root field * Updated debian/watch to track the GitHub tags Checksums-Sha1: 78fa718fc77f3d5244986ac488c6bd4b895df3ba 2774 commons-configuration2_2.15.1-1.dsc e49b66ab78aee8ba2e5c4ad8e363397746b271b2 730988 commons-configuration2_2.15.1.orig.tar.xz 3566d3a2efa61aa063d4d7487241c3603a8af232 5356 commons-configuration2_2.15.1-1.debian.tar.xz 3dbe8f3e85bfe462fcbe1a23ce9815b97fd3ff9d 19813 commons-configuration2_2.15.1-1_source.buildinfo Checksums-Sha256: ebb34b1905fca3aec726e65d585e4ceae07b0a2a76aef9652a0ce9b168dd1305 2774 commons-configuration2_2.15.1-1.dsc d38605e3650d982eec0a828d7d5948a1867b323c3160fec91eed6c0b9cd7b54c 730988 commons-configuration2_2.15.1.orig.tar.xz bf788a4560204e108c56f50225bd956946c9e9083651b79f142dfc1afb116e39 5356 commons-configuration2_2.15.1-1.debian.tar.xz c6ba4c41973adc2d2767f066835012578536301944e26b81a69f2b9e775b5308 19813 commons-configuration2_2.15.1-1_source.buildinfo Files: 335567c040ddb8103ca8a9df4c130776 2774 java optional commons-configuration2_2.15.1-1.dsc cb6156b4306621012702cf24cb67950a 730988 java optional commons-configuration2_2.15.1.orig.tar.xz 47fbc8c95678f63af198b4acf0761dc6 5356 java optional commons-configuration2_2.15.1-1.debian.tar.xz ed432e9c884dd16f9af1e76b36eee6aa 19813 java optional commons-configuration2_2.15.1-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmrZ6ygSHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsMAIP/1HjH8k8tpzc9tMUBGiq/YPnBNctUqpv sl7oKw+7WeDAXKti8/UdK63z3vaaapDJp2hPwpXee2/Oy+Nw41cDDHX4Ben2+SZs nD42tT8f4vxxDBFnEdpmq/JXawxdhwPezLZr4dGMx1uZuwlJKkRMiI+W+5N419vl +wrVffTE0/C1uXQaBjTTaeo0NSiD9ILavTgQnZgj/Q692vu5s5DpTBB1R8Gjr7nv lTYotKze/qIHzL7lCSK6H5ze+1GgfiWpctxRhZ8Rxbji1AQ3016IyPAnuCKzWP1r CHD90Io+4YfXs5zMMI/jVVJK4fZdWK68690wXvb05k6jF7tm7oRCAUp+Yf9jGQWu mrQc+6Z6NHk60Sz6s2NigUmxK1mFs/9fYM18h9ehXUsbrbL9A9xWMjAZYssRTQNs ie90NU2cSAn5KymBP4kmBbnDiIZQ2g/cF5raXuiSc1KNQqwVdZFN9v8NVsX7UAMe OPePUZqm2wXH+ts9hvbD7x0FJrCI8WSbH2+DyGwO9/XNRbAjQ1Fccm7JwPL/MoZ+ V/jYJRZ+3cUAjaylfFqo+ONyn4A5xgEMcQ5aIRNXq2E9i7ZpVhsLvGq21xdC+zHh yYzry5HiyRiP+sGpLTCJzYHZ4D7n8VAb4gK/7YKkuwfnxQH01J5aoL30aFsWUkV6 +6RrHtlBSHq2 =AUEv -----END PGP SIGNATURE-----
