Author: tn
Date: Mon Nov 9 22:22:07 2015
New Revision: 11092
Log:
Uploaded distribution files for Commons Collections 3.2.2.
Added:
dev/commons/collections/RELEASE-NOTES.txt (with props)
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz
(with props)
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.asc
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.md5
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.sha1
dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip (with
props)
dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.asc
dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.md5
dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.sha1
dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz (with
props)
dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.asc
dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.md5
dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.sha1
dev/commons/collections/source/commons-collections-3.2.2-src.zip (with
props)
dev/commons/collections/source/commons-collections-3.2.2-src.zip.asc
dev/commons/collections/source/commons-collections-3.2.2-src.zip.md5
dev/commons/collections/source/commons-collections-3.2.2-src.zip.sha1
Added: dev/commons/collections/RELEASE-NOTES.txt
==============================================================================
--- dev/commons/collections/RELEASE-NOTES.txt (added)
+++ dev/commons/collections/RELEASE-NOTES.txt Mon Nov 9 22:22:07 2015
@@ -0,0 +1,67 @@
+ Apache Commons Collections
+ Version 3.2.2
+ RELEASE NOTES
+
+
+INTRODUCTION:
+
+Commons collections is a project to develop and maintain collection classes
+based on and inspired by the JDK collection framework.
+This release is JDK1.3 compatible, and does not use JDK1.5 generics.
+
+This v3.2.2 release is a bugfix release, fixing several bugs present in the
previous
+releases of the 3.2 branch. Additionally, this release provides a mitigation
for a
+known remote code exploitation via the standard java object serialization
mechanism.
+By default, de-serialization of "InvokerTransformer" instances is prohibited
and
+will result in an exception. For more details, please refer to COLLECTIONS-580.
+
+All users are strongly encouraged to updated to this release.
+
+
+Changes in this version include:
+
+CHANGES
+=======
+
+o COLLECTIONS-580: De-serialization of "InvokerTransformer" is disabled by
default as this
+ can be exploited for remote code execution attacks. To
re-enable the
+ feature the system property
+
"org.apache.commons.collections.invokertransformer.enableDeserialization"
+ needs to be set to "true".
+
+BUGFIXES
+========
+
+o COLLECTIONS-538: "ExtendedProperties" will now use a privileged action to
access the
+ "file.separator" system property. In case the class does
not have
+ permission to read system properties, the "File#separator"
field will
+ be used instead. Thanks to Trejkaz.
+o COLLECTIONS-447: Tree traversal with a TreeListIterator will not be
affected anymore by
+ the removal of an element directly after a call to
previous(). Thanks to Jeffrey Barnes.
+o COLLECTIONS-444: SetUniqueList.set(int, Object) now works correctly if the
object to be inserted
+ is already placed at the given position. Thanks to Thomas
Vahrst, John Vasileff.
+o COLLECTIONS-350: Removed debug output in "MapUtils#getNumber(Map)". Thanks
to Michael Akerman.
+o COLLECTIONS-335: Fixed cache assignment for "TreeBidiMap#entrySet". Thanks
to sebb.
+o COLLECTIONS-334: Synchronized access to lock in "StaticBucketMap#size()".
Thanks to sebb.
+o COLLECTIONS-307: "SetUniqueList#subList()#contains(Object)" will now
correctly check the subList
+ rather than the parent list. Thanks to Christian Semrau.
+o COLLECTIONS-304: "SetUniqueList#set(int, Object)" will now correctly
enforce the uniqueness constraint.
+ Thanks to Rafa? Figas,Bjorn Townsend.
+o COLLECTIONS-294: "CaseInsensitiveMap" will now convert input strings to
lower-case in a
+ locale-independent manner. Thanks to Benjamin Bentmann.
+o COLLECTIONS-266: "MultiKey" will now be correctly serialized/de-serialized.
Thanks to Joerg Schaible.
+o COLLECTIONS-261: "Flat3Map#remove(Object)" will now return the correct
value mapped to the removed key
+ if the size of the map is less or equal 3. Thanks to ori.
+o COLLECTIONS-249: "SetUniqueList.addAll(int, Collection)" now correctly add
the collection at the
+ provided index. Thanks to Joe Kelly.
+o COLLECTIONS-228: "MultiValueMap#put(Object, Object)" and
"MultiValueMap#putAll(Object, Collection)"
+ now correctly return if the map has changed by this
operation.
+o COLLECTIONS-219: "CollectionUtils#removeAll" wrongly called
"ListUtils#retainAll". Thanks to Tom Leccese.
+o COLLECTIONS-217: Calling "setValue(Object)" on any Entry returned by a
"Flat3Map" will now
+ correctly set the value for the current entry. Thanks to
Matt Bishop.
+
+
+For complete information on Apache Commons Collections, including instructions
on how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Collections
website:
+
+http://commons.apache.org/collections/
Propchange: dev/commons/collections/RELEASE-NOTES.txt
------------------------------------------------------------------------------
svn:eol-style = native
Propchange: dev/commons/collections/RELEASE-NOTES.txt
------------------------------------------------------------------------------
svn:keywords = Id Revision HeadURL
Propchange: dev/commons/collections/RELEASE-NOTES.txt
------------------------------------------------------------------------------
svn:mime-type = text/plain
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz
==============================================================================
Binary file - no diff available.
Propchange:
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/x-gzip
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.asc
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.asc
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.asc
Mon Nov 9 22:22:07 2015
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+
+iQIcBAABAgAGBQJWQRizAAoJEKQfE8mZlFKTGaIP/jl6U0JmcBV/z2/ZVq7/UYOz
+/b+KRvy+b7T1fp9slQrj/dFMA9bM6l3EnbpYisvjyXBZBgOiHKjlz2HR7uefSAae
+cpV//Gy09UrYGoPuvkDnbwl5FOzXPeTozoLq6F0CCASg7mbUYPNjjw69zxwb7qsD
+nKq+iLV0/WOTaNdBGcsyu5/0DhLBI3f2aW4DgMZjWWgQs6elr+Xy1e5r6xh3SNzy
+i9FEgBsxFfWZ6JJ637xOMbIK3Erk5FkGe2F0yvjznZ7i3Y3HfQ/EeXaY4h8VUIUK
+Fjqpj26xXdEtGLUCQ6BM+yzyfNay1pAbOZAaFnRtdZ7NEZpOPutPdIIxb/su9H9f
+Mzqaa+yMx+65dfSJEfciSD7ZXEGTxMV31kFbIa56HgN7jzKj4fklXXaTLjVOgZYz
+nLuaSRgCbFXZAHU5+gDNHNnwZBCDuoalYXxYd4NdKITtpzLusHMvOCD1RC2vd7QK
+jETP6unofLe+1444SD7Ww+1vi4qahqwqoxlvJ2GGBmCEvFq1Z9adYM+MlGjrH1yq
+Z/eePR/SMWZOOAQGFnx0SZ/rWtDvVn4TZldLkNJkTFcn3KyaOU/3eV4Ls0dB7K1Y
+aa0/BV7cganBp8dBbpTcX3qnh9MeH3ANg/L2i3Zy3GboAF4/+veE+xdDcQftX4J3
+7q0PVndkgB33byfM2gYH
+=loKt
+-----END PGP SIGNATURE-----
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.md5
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.md5
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.md5
Mon Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+4b75ce88a5d3f4ecf7f312715e717ea8
\ No newline at end of file
Added:
dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.sha1
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.sha1
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.tar.gz.sha1
Mon Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+58a203acc07446e43fb0ea431bf5e37c67069a9d
\ No newline at end of file
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip
==============================================================================
Binary file - no diff available.
Propchange: dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip
------------------------------------------------------------------------------
svn:mime-type = application/zip
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.asc
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.asc
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.asc Mon
Nov 9 22:22:07 2015
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=V3cn
+-----END PGP SIGNATURE-----
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.md5
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.md5
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.md5 Mon
Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+9dbe61423b79c36c7083dc1e32d9aeef
\ No newline at end of file
Added: dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.sha1
==============================================================================
--- dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.sha1
(added)
+++ dev/commons/collections/binaries/commons-collections-3.2.2-bin.zip.sha1 Mon
Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+e83a3089baa5b14d499cb8f22024e910abd16fdd
\ No newline at end of file
Added: dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz
==============================================================================
Binary file - no diff available.
Propchange: dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz
------------------------------------------------------------------------------
svn:mime-type = application/x-gzip
Added: dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.asc
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.asc
(added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.asc Mon
Nov 9 22:22:07 2015
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=1U1P
+-----END PGP SIGNATURE-----
Added: dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.md5
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.md5
(added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.md5 Mon
Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+576463c37a2986103f58f2df85f15582
\ No newline at end of file
Added: dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.sha1
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.sha1
(added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.tar.gz.sha1
Mon Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+d10011f4b10139dd4af5037ea8174e65785371f2
\ No newline at end of file
Added: dev/commons/collections/source/commons-collections-3.2.2-src.zip
==============================================================================
Binary file - no diff available.
Propchange: dev/commons/collections/source/commons-collections-3.2.2-src.zip
------------------------------------------------------------------------------
svn:mime-type = application/zip
Added: dev/commons/collections/source/commons-collections-3.2.2-src.zip.asc
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.zip.asc (added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.zip.asc Mon
Nov 9 22:22:07 2015
@@ -0,0 +1,17 @@
+-----BEGIN PGP SIGNATURE-----
+Version: GnuPG v1
+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+=R7jQ
+-----END PGP SIGNATURE-----
Added: dev/commons/collections/source/commons-collections-3.2.2-src.zip.md5
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.zip.md5 (added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.zip.md5 Mon
Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+fb06cb50d321ec39e338f3f9509db414
\ No newline at end of file
Added: dev/commons/collections/source/commons-collections-3.2.2-src.zip.sha1
==============================================================================
--- dev/commons/collections/source/commons-collections-3.2.2-src.zip.sha1
(added)
+++ dev/commons/collections/source/commons-collections-3.2.2-src.zip.sha1 Mon
Nov 9 22:22:07 2015
@@ -0,0 +1 @@
+5024d3dadab3a96bc8164fc92feb016172e89c7e
\ No newline at end of file
