Fedora 40: Critical Advisory for Apache Commons Stack Overflow Errors

The Commons Configuration software library provides a generic

configuration interface which enables a Java application to read

configuration data from a variety of sources. Commons Configuration

provides typed access to single, and multi-valued configuration

parameters as demonstrated by the following code:

Double double = config.getDouble("number");

Integer integer = config.getInteger("number");

Configuration parameters may be loaded from the following sources:

- Properties files

- XML documents

- Windows INI files

- Property list files (plist)

- JNDI

- JDBC Datasource

- System properties

- Applet parameters

- Servlet parameters

Configuration objects are created using configuration builders.

Different configuration sources can be mixed using a

CombinedConfigurationBuilder and a CombinedConfiguration. Additional

sources of configuration parameters can be created by using custom

configuration objects. This customization can be achieved by extending

AbstractConfiguration or AbstractHierarchicalConfiguration.

%javadoc_package

This update contains security fixes for CVE-2024-29131 and CVE-2024-29133. See NOTES.txt for changes in versions 2.10.0 and 2.10.1.