[Bug 1869654] Re: Sync commons-configuration2 2.7-1 (universe) from Debian unstable (main)

[Hans Joachim Desserud]

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1953

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1869654

Title:
  Sync commons-configuration2 2.7-1 (universe) from Debian unstable
  (main)

Status in commons-configuration2 package in Ubuntu:
  New

Bug description:
  Please sync commons-configuration2 2.7-1 (universe) from Debian
  unstable (main)

  It fixs a security bug CVE-2020-1953.

  Changelog entries since current focal version 2.2-1:

  commons-configuration2 (2.7-1) unstable; urgency=medium

    * Team upload
    * Update debian/watch to repack as .xz and use https URL
    * New upstream version 2.7, CVE-2020-1953 (Closes: #954713)
    * Specify debhelper compat 12 via debhelper-compat dependency
    * Add build-dep on libcommons-text-java
    * Remove get-orig-source target from debian/rules
    * Set source and target in maven.properites to Java 8
    * Specify debhelper compat 12 via debhelper-compat dependency
    * Add build-dep on libcommons-text-java
    * Remove get-orig-source target from debian/rules
    * Set source and target in maven.properites to Java 8
    * Set "Rules-Requires-Root: no" in debian/control
    * Bump Standards-Version to 4.5.0
    * Freshen years in debian/copyright
    * Update Vcs URLs to point to Salsa
    * Ship NOTICE.txt with binary package

   -- tony mancill <tmancill at debian.org>  Sat, 28 Mar 2020 21:32:41
  -0700

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/commons-configuration2/+bug/1869654/+subscriptions