SUSE-RU-2026:22560-1: moderate: Recommended update for apache-commons-pool2, apache-commons-net, apache-commons-daemon, apache-commons-configuration2
SLE-UPDATES
null at suse.de
Tue Jul 14 16:35:23 UTC 2026
# Recommended update for apache-commons-pool2, apache-commons-net, apache-
commons-daemon, apache-commons-configuration2
Announcement ID: SUSE-RU-2026:22560-1
Release Date: 2026-07-06T20:10:17Z
Rating: moderate
References:
Affected Products:
* SUSE Linux Enterprise Server 16.0
* SUSE Linux Enterprise Server for SAP applications 16.0
An update that can now be installed.
## Description:
This update for apache-commons-pool2, apache-commons-net, apache-commons-daemon,
apache-commons-configuration2 fixes the following issues:
Changes in apache-commons-pool2:
* Update to 2.13.1
* Fixed Bugs:
* POOL-427: The fix for POOL-425 introduced a regression where addObject fails when maxIdle is negative (indicating no limit)
* Update to 2.13.0
* New features:
* Add org.apache.commons.pool2.PooledObject .nonNull(PooledObject)
* Add org.apache.commons.pool2.PooledObject .getObject(PooledObject)
* Made statistics collection optional in BaseGenericObjectPool #429
* Fixed Bugs:
* POOL-424: GenericObjectPool.invalidateObject() can leave other threads waiting to borrow hanging. The fix for this issue changes behavior of invalidateObject. This method now always tries to add a new instance to the pool to replace the invalidated and destroyed instance. As a result of this change, abandoned object removal now attemps to replace abandoned objects
* POOL-425: GenericObjectPool addObject does not respect maxIdle
* POOL-350: Make placement of calls to GKOP reuseCapacity configurable
* POOL-290: TestSoftRefOutOfMemory (unit test) can loop infinitely on failure
* POOL-419: GenericObjectPool counters and object collections can be corrupted when returnObject and invalidate are invoked concurrently by client threads on the same pooled object
* POOL-421: GenericObjectPool addObject should return immediately when there is no capacity to add
* POOL-420: The maximum wait time for GenericKeyedObjectPool .borrowObject(*) may exceed configured maximum wait time. This is the same issue as POOL-418, but for GKOP. Also included in this fix is a change to addObject that prevents it from waiting for capacity to create. That method now returns immediately when there is no capcity to add to the pool under the given key
* Remove -nouses directive from maven-bundle-plugin. OSGi package imports now state 'uses' definitions for package imports, this doesn't affect JPMS (from org.apache.commons:commons-parent:80)
* POOL-418: The maximum wait time for GenericObjectPool .borrowObject(*) may exceed expectations due to a spurious thread wakeup. he remaining duration was incorrectly calculated and the method did not end up waiting long enough. Recompute the remaining duration an additional time when we block when exhausted
* Fix site link from the About page to the Download page, see also #387
* Operation on the "idleHighWaterMark" shared variable in "ErodingFactor" class is not atomic [org.apache.commons.pool2.PoolUtils$ErodingFactor] At PoolUtils.java:[line 98] AT_NONATOMIC_OPERATIONS_ON_SHARED_VARIABLE
* org.apache.commons.pool2.impl.GenericObjectPool .create(Duration) should normalize a negative duration to zero
* Fix potential ConcurrentModificationException in EvictionTimer thread clean-up
* Fix potential ConcurrentModificationException in EvictionTimer tasks
* Update to 2.12.1
* Fixed Bugs:
* Use java.time.Instant precision in org.apache.commons.pool2 .impl.ThrowableCallStack.Snapshot throwable message
* GenericObjectPool.borrowObject(Duration) doesn't obey its borrowMaxWait Duration argument when the argument is different from GenericObjectPool.getMaxWaitDuration()
* POOL-418: The maximum wait time for GenericObjectPool .borrowObject(*) may exceed expectations due to a spurious thread wakeup
* Javadoc is missing its Overview page
* Migrate site generation templates to https://maven.apache.org/xsd/xdoc-2.0.xsd
* Update to 2.12.0
* New features:
* Add PooledObject.getFullDuration()
* Add GenericKeyedObjectPool.getKeys()
* Add KeyedObjectPool.getKeys()
* Add github/codeql-action.
* Add BaseGenericObjectPool.Evictor.toString().
* Make BaseGenericObjectPool implement AutoCloseable.
* Add BaseGenericObjectPool methods that return Duration and deprecate equivalents that return milliseconds as long
* Add BaseObjectPoolConfig.DEFAULT_DURATION_BETWEEN_EVICTION_RUNS and deprecate BaseObjectPoolConfig .DEFAULT_TIME_BETWEEN_EVICTION_RUNS
* Fixed Bugs:
* POOL-401: Ensure that capacity freed by invalidateObject is available to all keyed pools
* POOL-391: Ensure capacity freed by clear is made available to GKOP borrowers
* POOL-402: Check blockWhenExhausted in hasBorrowWaiters #116
* Simplify test assertion with similar call but simpler. #131
* POOL-405: NullPointerException GenericKeyedObjectPool .invalidateObject(GenericKeyedObjectPool.java:1343)
* POOL-408: Fix a typo related to KeyedPooledObjectFactory on the site and Javadoc
* Fail-fast on null input for DefaultPooledObjectInfo .DefaultPooledObjectInfo(PooledObject) with a NullPointerException
* POOL-393: Improve BaseGenericObjectPool's JMX Register performance when creating many pools
* Null-guard in GenericObjectPool.use(T) like other call sites of GenericObjectPool.getPooledObject(T)
* POOL-411: Guard against NPE when deregistering a key at the end of borrow
* Make private GenericKeyedObjectPool.ObjectDeque class static
* Make private BaseGenericObjectPool.StatsStore class static
* [StepSecurity] ci: Harden GitHub Actions #225
* Fix possible NPE in DefaultPooledObjectInfo .getPooledObjectToString()
* Fix possible NPE in DefaultPooledObjectInfo .getPooledObjectType()
* Update to 2.11.1
* Fixed Bugs:
* Getting a PooledObject's active duration returns a negative duration when the object is borrowed but not returned. Affects: ° PooledObject.getActiveDuration() ° PooledObject.getActiveTime() ° PooledObject.getActiveTimeMillis()
* The default implementation of TrackedUse.getLastUsedInstant() uses seconds instead of milliseconds
* This interface is not implemented within Apache Commons Pool but affects Apache Commons DBCP
* DefaultPooledObject.getIdleTime() drops nanoseconds on Java 9 and greater
* Fix field label in BaseGenericObjectPool toString() builder: From timeBetweenEvictionRunsMillis to durationBetweenEvictionRuns
* Fix field label in BaseObjectPoolConfig toString() builder: From maxWaitMillis to maxWaitDuration
* Fix field label in NoSuchElementException message for GenericObjectPool.borrowObject(Duration): From borrowMaxWaitMillis to borrowMaxWaitDuration
* Reimplement DefaultPooledObject.getIdleDuration() using Duration computation
* Reimplement BaseGenericObjectPool.maxBorrowWait as a Duration instead of a long
* Minors Changes #89
* Update to 2.11.0
* New features:
* Track timestamps with Instants instead of longs. There is currently no increased precision on Java 8, but starting with Java 9, the JRE SystemClock precision is increased usually down to microseconds, or tenth of microseconds, depending on the OS, Hardware, and JVM implementation. Add and use: ° DefaultPooledObject.getCreateInstant() ° DefaultPooledObject.getLastUsedInstant() ° PooledObject.getCreateInstant() ° PooledObject.getLastBorrowInstant() ° PooledObject.getLastReturnInstant() ° PooledObject.getLastUsedInstant() ° TrackedUse#getLastUsedInstant()
* Add BaseObjectPoolConfig.setEvictorShutdownTimeoutDuration(Duration), deprecate setEvictorShutdownTimeoutMillis(Duration)
* Add BaseGenericObjectPool.{get|set}MaxWaitDuration(Duration) and deprecate {get|set}MaxWaitMillis(long)
* Add BaseObjectPoolConfig.{get|set}MaxWaitDuration(Duration) and deprecate {get|set}MaxWaitMillis(long)
* Add and use Duration APIs instead of ints or longs. ° Add and use Duration APIs in BaseGenericObjectPool: getDurationBetweenEvictionRuns(), getEvictorShutdownTimeoutDuration(), getMinEvictableIdleDuration(), getSoftMinEvictableIdleDuration(), setMaxWait(Duration), setMinEvictableIdle(Duration), setSoftMinEvictableIdle(Duration) ° Add and use Duration APIs in BaseObjectPoolConfig: getDurationBetweenEvictionRuns(), getEvictorShutdownTimeoutDuration(), getMinEvictableIdleDuration(), getSoftMinEvictableIdleDuration() ° Add and use Duration APIs in EvictionConfig: getIdleEvictDuration(), getIdleSoftEvictDuration() ° Add and use Duration APIs in PooledObject: getIdleDuration(), getActiveDuration() ° No need to initialize instance variables to their default values ° Update Javadocs. ° Update toString() implementations with duration labels
* POOL-396: Handle validation exceptions during eviction. #85
* POOL-395: Improve exception thrown in GenericObjectPool .borrowObject when pool is exhausted. Added BaseGenericObjectPool.setMessagesStatistics(boolean)
* Add and use AbandonedConfig.copy(AbandonedConfig) to fix CPD code duplication issues in GenericKeyedObjectPool and GenericObjectPool
* Pull up AbandonedConfig and related methods from GenericKeyedObjectPool and GenericObjectPool to BaseGenericObjectPool (fix for CPD issues). ° BaseGenericObjectPool.getLogAbandoned() ° BaseGenericObjectPool.getRemoveAbandonedOnBorrow() ° BaseGenericObjectPool.getRemoveAbandonedOnMaintenance() ° BaseGenericObjectPool.getRemoveAbandonedTimeout() ° BaseGenericObjectPool.getRemoveAbandonedTimeoutDuration() ° BaseGenericObjectPool.isAbandonedConfig() ° BaseGenericObjectPool.setAbandonedConfig(AbandonedConfig)
* Fixed Bugs:
* Fix "[WARNING] Old version of checkstyle detected. Consider updating to >= v8.30." Update Checktyle to 8.44
* Make Duration setters use their respective default values when null
* Call swallowException(Exception) instead of printing exceptions to the console in GenericKeyedObjectPool .removeAbandoned(AbandonedConfig) and GenericObjectPool .removeAbandoned(AbandonedConfig)
* Fix Javadoc link reference #91
* No need to initialize to default values. #90
* Update to 2.10.0
* New features:
* Add and use java.time.Duration APIs timeouts instead of using ints for seconds.
* Implement AbandonedConfig for GenericKeyedObjectPool #67
* Fixed Bugs:
* Simplify Assertions in tests #77
* Replace C-style array declaration with Java style #80
* Use Objects.equals(); Use Anonymous type; Use method reference instead Lambda; Replace Loop with Collection.removeIf(). #81
* Use diamond operator. #82
* Code clean ups. #83
* Update to 2.9.0
* Changes:
* POOL-387: Object factory destroy method should carry information on activation context
* Update spotbugs from 4.0.6 to 4.1.3, #37, #41, #46
* Update actions/checkout from v2.3.1 to v2.3.3 #56, #45
* Update actions/setup-java from v1.4.0 to v1.4.2 #42
* Update optional asm-util from 8.0.1 to 9.0 #44
* Update to 2.8.1
* New features:
* POOL-385: Added Automatic-Module-Name to support JPMS #31
* Fixed Bugs:
* POOL-386: Refactored EvictionTimer usage tracking to fix POOL-386 and handle abandoned pools. #32
* [Javadoc] Add missing @throws comment in PoolUtils. #27
* Changes:
* POOL-384: Update optional library org.ow2.asm:asm-util from 7.2 to 8.0.1
* Update site reports from org.apache.bcel:bcel 6.4.1 to 6.5.0
* Update site reports from maven-pmd-plugin 3.12.0 to 3.13.0
* Update build from biz.aQute.bnd:biz.aQute.bndlib 5.1.0 -> 5.1.2
* Update actions/checkout from v1 to v2.3.1 #33
* Update commons-parent from 50 to 51 #36
* Update Checkstyle plugin from 3.0.0 to 3.1.1
* Update JApiCmp from 0.14.1 to 0.14.3
* Update animal-sniffer-maven-plugin from 1.16 to 1.19
* Update to 2.8.0
* New features:
* POOL-378: Deprecate PoolUtils.prefill(ObjectPool, int) in favor of ObjectPool.addObjects(int)
* POOL-379: Deprecate PoolUtils.prefill(KeyedObjectPool, K, int) in favor of KeyedObjectPool.addObjects(K, int)
* POOL-380: Deprecate PoolUtils.prefill(KeyedObjectPool, Collection, int) in favor of KeyedObjectPool .addObjects(Collection, int)
* Fixed Bugs:
* POOL-374: org.apache.commons.pool2.impl.GenericKeyedObjectPool .returnObject(K, T) should throw IllegalStateException instead of NullPointerException when a key is not found in the pool map
* POOL-376: Fixed regression from original fix for POOL-356 which could result in NPE when destroying objects
* POOL-326: Eliminated NPE / ISE exceptions due to keyed pools being prematurely removed
* Close BufferedOutputStream in test before calling toString on underlying BufferedOutputStream #26
* [Javadoc] Add missing @throws comment in SoftReferenceObjectPool. #28
* Changes:
* POOL-375: Update optional library cglib from 3.2.12 to 3.3.0
* Update site build from Apache Commons BCEL 6.3.1 to 6.4.1
* POOL-377: Update optional library org.ow2.asm:asm-util from 7.1 to 7.2
* Update to 2.7.0
* New features:
* POOL-370: Add org.apache.commons.pool2.PooledObject #getBorrowedCount()
* POOL-371: Add org.apache.commons.pool2.PooledObject #setRequireFullStackTrace(boolean)
* Fixed Bugs:
* POOL-361: Move validation for newly created objects into create(). Fixes #23
* Changes:
* POOL-364: Update from Java 7 to Java 8
* POOL-365: Update ASM from 7.0 to 7.1
* POOL-366: Update optional library cglib from 3.2.10 to 3.2.12
* POOL-367: Fix typo in package private method name stopEvitor() -> stopEvictor() #22
* Update to 2.6.2
* Fixed Bugs:
* POLL-362: Always null out org.apache.commons.pool2.impl .BaseGenericObjectPool.evictionIterator to match org.apache.commons.pool2.impl.BaseGenericObjectPool.evictor
* POLL-363: Evictor Thread prevents Spring Context shutdown in standalone app
* POLL-348: The commons-pool-evictor-thread should run as a Deamon
* Update to 2.6.1
* Fixed Bugs:
* POOL-340: Correct validateObject with concurrent borrowObject
* POOL-356: Fix deadlock on massive concurrent requests
* POOL-347: Method borrowObject waits for maxWaitMillis over in pool full
* POOL-359: NullPointerException closing multiple GenericObjectPools
* POOL-326: Threading issue, NullPointerException and IllegalStateException in GenericKeyedObjectPool
* POOL-352: CallStackUtils mishandles security manager check (partial fix.)
* Changes:
* POOL-345: Update optional library cglib from 3.2.6 to 3.2.9
* POOL-346: Move common configuration setter to BaseGenericObjectPool #9
* POOL-349: Update optional library asm-util from 6.2 to 7.0
* POOL-360: Update optional library cglib from 3.2.9 to 3.2.10
* Update to 2.6.0
* Fixed Bugs:
* POOL-337: Ensure cancelled eviction tasks are removed from scheduler
* POOL-338: GenericObjectPool constructor may throw an exception under OSGi
* POOL-324: org.apache.commons.pool2.impl.GenericObjectPool .getFactoryType() throws java.lang.ClassCastException
* POOL-344: Delete repeated call startEvictor
* Changes:
* POOL-336: GenericObjectPool's borrowObject lock if create() fails with Error
* POOL-339: Update optional library cglib from 3.2.5 to 3.2.6
* POOL-341: Update optional library asm-util from 6.0 to 6.1.1
* POOL-342: Update optional library asm-util from 6.1.1 to 6.2
* Update to 2.5.0
* New features:
* POOL-332: ObjectPool and KeyedObject pool should extend Closeable.
* POOL-335: Make abandoned logging stack trace requirements configurable. This also reverts the default behavior introduced by POOL-320.
* Changes:
* POOL-331: Update from Java 6 to 7.
* POOL-333: Update optional dependency asm-util from 5.2 to 6.0
* POOL-334: org.apache.commons.pool2.impl.ThrowableCallStack .Snapshot is missing serialVersionUID
* Update to 2.4.3
* New features:
* POOL-320: Use more efficient stack walking mechanisms for usage tracking when possible.
* Fixed Bugs:
* POOL-328: Documentation with repeated words (sources, tests, and examples)
* POOL-317: Correction of default value of softMinEvictableIdleTimeMillis in BaseObjectPoolConfig
* POOL-309: Fix misspellings from "destory" to "destroy"
* POOL-306: Ensure BaseGenericObjectPool .IdentityWrapper#equals() follows the expected contract for equals()
* POOL-303: Ensure that threads do not block indefinitely if more than maxTotal threads try to borrow an object at the same time and the factory fails to create any objects.
* POOL-310: Ensure that threads using GKOP do not block indefinitely if more than maxTotal threads try to borrow objects with different keys at the same time and the factory destroys objects on return
* Ensure that any class name used for evictionPolicyClassName represents a class that implements EvictionPolicy.
* POOL-315: Add a configurable delay (default 10 seconds) to wait when shutting down an Evictor to allow the associated thread time to complete and current evictions and to terminate
* Ensure that a call to GKOP preparePool() takes account of other threads that might create objects concurrently, particularly the Evictor.
* Changes:
* POOL-280: Small refactoring of borrowObject() to reduce code duplication
* POOL-307: Replace inefficient use of keySet with entrySet in GKOP
* POOL-322: Update optional cglib library from 3.1 to 3.2.5.
* POOL-323: Update optional OW2 ASM from 5.0.4 to 5.2.
* set source=1.4 for java
Changes in apache-commons-net:
* Upgrade to 3.13.0
* New features
* Add DatagramSocketClient.getDefaultTimeoutDuration() and deprecate getDefaultTimeout()
* NET-741: Add subnet IPv6 handling with SubnetUtils6 #391
* Fixed Bugs
* DaytimeTCPClientTest now should now pass inside most VPNs
* Migrate tests to JUnit5 #358, #359
* Fix malformed Javadoc comments
* IMAPExportMbox now restores the current thread's interrupt flag when catching InterruptedException
* IOUtil.readWrite() now restores the current thread's interrupt flag when catching InterruptedException
* TelnetInputStream now restores the current thread's interrupt flag when catching InterruptedException
* NET-740: FTP fails to parse listings for Linux vsftpd in Chinese or Japanese #393
* TelnetInputStream.read() doesn't preserve the original InterruptedException as the cause of its InterruptedIOException
* FTPClient._storeFile(String, String, InputStream) doesn't always close it's internal socket when an exception is thrown early in processing
* ListenerList.removeListener(T) now ignores null input to avoid a NullPointerException
* ListenerList.addListener(T) now ignores null input
* Fix typo in FTPConnectionClosedException message from FTP .getReply(boolean)
* Reimplement Util.copyReader() with IOUtils.copyLarge()
* Reimplement Util.copyStream() with IOUtils.copyLarge()
* Reimplement Util.copyStream() with IOUtils.copyLarge()
* Deprecate Util.copyReader(Reader, Writer) in favor of IOUtils .copyLarge(Reader, Writer)
* Upgrade to 3.12.0
* New features
* Add org.apache.commons.net.nntp.Article#getChild()
* Add org.apache.commons.net.nntp.Article#getNext()
* Add private SubnetAddressStringIterable and private SubnetAddressStringIterator to implement SubnetInfo.iterableAddressStrings() and SubnetInfo.streamAddressStrings() #298
* Add SubnetInfo.iterableAddressStrings()
* Add SubnetInfo.streamAddressStrings()
* Add FTPCmd.OPTS
* Add FTP.opts(String, String)
* Add FTP.opts(String...)
* Add FTP.setControlEncoding(Charset)
* Add --OPTS to FTPClientExample
* NET-727: Add accessing options map for TFTP request packet and allow using 'blksize' option #331
* Add org.apache.commons.net.util.ListenerList.isEmpty()
* Add org.apache.commons.net.ftp.FTPClient .getSystemTypeOverride()
* Add generics to ListenerList
* Add module-info.class in the JAR file instead of an Automatic-Module-Name in MANIFEST.MF
* Fixed Bugs
* Increase message limit in IMAPReply.TAGGED_RESPONSE from 80 to 500 characters
* Increase message limit in IMAPReply.UNTAGGED_RESPONSE from 160 to 500 characters
* Remove InvalidKeySpecException from AuthenticatingIMAPClient .auth(AUTH_METHOD, String, String) never throws, it's not thrown
* Remove InvalidKeySpecException from AuthenticatingIMAPClient .authenticate(AUTH_METHOD, String, String) never throws, it's not thrown
* Remove InvalidKeySpecException from ExtendedPOP3Client .auth(AUTH_METHOD, String, String) never throws, it's not thrown
* Remove InvalidKeySpecException from org.apache.commons.net.smtp.AuthenticatingSMTPClient .auth(AUTH_METHOD, String, String) never throws, it's not thrown
* Fix SpotBugs RCN_REDUNDANT_NULLCHECK_OF_NONNULL_VALUE in SSLSocketUtils
* Fix PMD UnnecessaryFullyQualifiedName
* Fix PMD UnusedFormalParameter
* Fix PMD AvoidBranchingStatementAsLastInLoop in org.apache .commons.net.bsd.RCommandClient
* Fix PMD UselessOverridingMethod in org.apache.commons.net .telnet.TelnetClient
* Fix PMD UnnecessaryModifier
* Deprecate MLSxEntryParser default constructor in favor of MLSxEntryParser.getInstance()
* Deprecate direct access to org.apache.commons.net.nntp.Article .kid and next fields
* Fix SpotBugs CT_CONSTRUCTOR_THROW in Base64 by implementing finalize() as a noop to avoid finalizer attacks
* Add missing Javadoc to ListenerList
* Add missing Javadoc to SubnetUtils
* Deprecate PrintCommandListeners.PrintCommandListeners()
* Deprecate NtpUtils.NtpUtils()
* Deprecate FTPFileFilters.FTPFileFilters()
* Avoid multiple possible NullPointerException in SocketClient .verifyRemote(Socket)
* PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent) doesn't always use an end-of-line
* FTPClientExample uses the wrong FTP system type to parse file lines
* Base64 does not call super.finalize()
* TFTPServer does not call super.finalize()
* KeyManagerUtils.loadStore(String, File, String) shouldn't ignore an IOException closing a keystore stream; use try-with-resources
* NNTPClient.readNewsgroupListing() can use an ArrayList instead of a Vector
* Deprecate org.apache.commons.net.util.Charsets
* Performance: NTFTPEntryParser.parseFTPEntry(String) doesn't need to parse timestamps if there is no name
* Improve error handling in org.apache.commons.net.ftp.parser .DefaultFTPFileEntryParserFactory .createFileEntryParser(String, FTPClientConfig)
* Fail-fast in org.apache.commons.net.PrintCommandListener .PrintCommandListener(PrintWriter, boolean, char, boolean) if the PrintWriter is null
* Avoid NullPointerException in org.apache.commons.net .PrintCommandListener.protocolCommandSent(ProtocolCommandEvent)
* Avoid NullPointerException in org.apache.commons.net .PrintCommandListener.protocolReplyReceived(ProtocolCommandEvent)
* Upgrade to 3.11.1
* Fixed Bugs
* Allow longer data in pattern IMAPReply.UNTAGGED_RESPONSE
* Fix Reproducible Builds issues #259
* Upgrade to 3.11.0
* New features
* NET-726: Add protected getters to FTPSClient #204
* Add SubnetUtils.toString()
* Add Maven property project.build.outputTimestamp for build reproducibility
* Add FTP.DEFLATE_TRANSFER_MODE to support the "deflate" compression format in FTPClient.setFileTransferMode(int)
* Add org.apache.commons.net.SocketClient.checkOpenOutputStream()
* Fixed Bugs
* Precompile regular expression in UnixFTPEntryParser .preParse(List<String>)
* Guard against polynomial regular expression used on uncontrolled data in VMSVersioningFTPEntryParser.REGEX
* Guard against polynomial regular expression used on uncontrolled data in IMAPReply.TAGGED_RESPONSE
* Guard against polynomial regular expression used on uncontrolled data in IMAPReply.UNTAGGED_RESPONSE
* NET-730: Cannot connect to FTP server with HTTP proxy
* Base 64 Encoding with URL and Filename Safe Alphabet should not chunk per RFC 4648
* Deprecate org.apache.commons.net.util.Charsets.Charsets() for removal
* Deprecate org.apache.commons.net.util.TrustManagerUtils .TrustManagerUtils() for removal
* Upgrade to 3.10.0
* New features
* Add and use DatagramSocketClient.setDefaultTimeout(Duration) and deprecate DatagramSocketClient.setDefaultTimeout(int)
* Add and use TFTP.DEFAULT_TIMEOUT_DURATION and deprecate org.apache.commons.net.tftp.TFTP.DEFAULT_TIMEOUT
* Add and use DatagramSocketClient#getSoTimeoutDuration()
* Add and use DatagramSocketClient#setSoTimeout(Duration)
* Add and use DatagramSocketClient.checkOpen()
* Add TelnetClient.sendAYT(Duration)
* TFTPServer implements AutoCloseable
* DatagramSocketClient implements AutoCloseable
* Add IMAP package tests, include junit-jupiter-params artifact #166
* Add Base64 missing tests and documentation fixes #161
* Add FTPFile tests and fix Javadoc typos #162
* Add IMAPReply tests and documentation fixes #165
* Fixed Bugs
* NET-650: Delegate host resolution to Socket.connect() #138
* Fixes many grammar issues and typos in JavaDoc and code comments #141
* Remove redundant (null) initializations and other clean ups #155
* TFTPServer.setMaxTimeoutRetries() now throws IllegalArgumentException instead of RuntimeException
* TFTPServer.setSocketTimeout() now throws IllegalArgumentException instead of RuntimeException
* FTPCommand.checkArray() now throws IllegalStateException instead of RuntimeException
* org.apache.commons.net.nntp.Threader now throws IllegalStateException instead of RuntimeException
* POP3Command static initializer now throws IllegalStateException instead of RuntimeException
* SMTPCommand static initializer now throws IllegalStateException instead of RuntimeException
* SubnetUtils.SubnetInfo.getPreviousAddress() now throws IllegalStateException instead of RuntimeException
* IMAPExportMbox.MboxListener.chunkReceived(IMAP) now throws UncheckedIOException instead of RuntimeException
* IMAPUtils.imapLogin(URI, int, ProtocolCommandListener) now throws IOException instead of RuntimeException while maintaining method signature source compatibility
* [StepSecurity] ci: Harden GitHub Actions #156
* NET-722: Javadoc for FtpClient .setControlKeepAliveReplyTimeout(Duration) says timeout is in milliseconds
* Change class org.apache.commons.net.ftp.parser .MVSFTPEntryParser to support more datasets #182
* Bulletproof TFTPServerPathTest #173
* Deprecate org.apache.commons.net.util.Base64 in favor of java.util.Base64
* Replace use of org.apache.commons.net.util.Base64 with java.util.Base64 in org.apache.commons.net.ftp
* Replace use of org.apache.commons.net.util.Base64 with java.util.Base64 in org.apache.commons.net.imap
* Replace use of org.apache.commons.net.util.Base64 with java.util.Base64 in org.apache.commons.net.pop3
* Replace use of org.apache.commons.net.util.Base64 with java.util.Base64 in org.apache.commons.net.smtp
Changes in apache-commons-daemon:
* Upgrade to 1.6.1
* Bug Fixes:
* Remove -nouses directive from maven-bundle-plugin. OSGi package imports now state 'uses' definitions for package imports, this doesn't affect JPMS (from org.apache.commons:commons-parent:80)
* Document --enable-preview
* Fix first appearance of --enable-native-access
* Procrun. Fix redirection issues on some OS versions by using recommended method to redirect stdout and stderr. Fixes DAEMON-398.
* Procrun. Fix updating of startup mode to 'Automatic (delayed)' being incorrectly processed as an update to 'Manual'. Fixes DAEMON-439.
* Procrun. Fix timeout handling #238. Fixes DAEMON-468.
* Procrun. Replace RTF version of license header with plain text version of full license in about box for monitor application. Fixes DAEMON-472.
* Procrun. Service should be marked as stopped if the service worker crashes. Fixes DAEMON-475.
* jsvc. Fix compilation warnings.
* jsvc. Fix a regression in 1.5.1 that exposed long standing bugs around the locking and unlocking of pid files. Also fix the locking/unlocking bugs.
* Detaches from console when the service stops #307. Fixes DAEMON-477.
* jsvc. Correct a packaging error in the 1.6.0 native source tarball for *nix systems. Thanks to Michael Osipov.
* New Features:
* Add support for --enable-native-access Java startup option in jsvc. Fixes DAEMON-471.
* Add tests for prunsrv on Windows #260.
* Add Java API compatibility report to the site (JApiCmp).
* Procun. Build binaries for Windows using the static hybrid CRT strategy by default.
* jsvc. Use FreeBSD's setproctitle(3) to pass -procname similar to daemon(8).
* procrun. Add ARM64 support for Windows binaries. Fixes DAEMON-462.
* Update dependencies:
* Bump org.apache.commons:commons-parent from 78 to 91 #253, #255, #287.
* Update to use new ASF logo
* Bump org.apache.commons:commons-parent from 93 to 99.
* jsvc. Consistently use strerror(3) for log output.
Changes in apache-commons-configuration2:
* Upgrade to version 2.15.1
* Fixed Bugs
* CONFIGURATION-856: The artifact commons-io:commons-io is a normal dependency
* Avoid NPE when combined location strategy sub strategies is immutable list (#639)
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
* SUSE Linux Enterprise Server 16.0
zypper in -t patch SUSE-SLES-16.0-1146=1
* SUSE Linux Enterprise Server for SAP applications 16.0
zypper in -t patch SUSE-SLES-16.0-1146=1
## Package List:
* SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64)
* apache-commons-daemon-jsvc-1.6.1-160000.1.2
* apache-commons-daemon-1.6.1-160000.1.2
* apache-commons-daemon-jsvc-debuginfo-1.6.1-160000.1.2
* apache-commons-daemon-debugsource-1.6.1-160000.1.2
* SUSE Linux Enterprise Server 16.0 (noarch)
* apache-commons-pool2-2.13.1-160000.1.2
* apache-commons-daemon-javadoc-1.6.1-160000.1.2
* apache-commons-net-javadoc-3.13.0-160000.1.2
* apache-commons-configuration2-javadoc-2.15.1-160000.1.2
* apache-commons-pool2-javadoc-2.13.1-160000.1.2
* apache-commons-net-3.13.0-160000.1.2
* apache-commons-configuration2-2.15.1-160000.1.2
* SUSE Linux Enterprise Server for SAP applications 16.0 (noarch)
* apache-commons-pool2-2.13.1-160000.1.2
* apache-commons-daemon-javadoc-1.6.1-160000.1.2
* apache-commons-net-javadoc-3.13.0-160000.1.2
* apache-commons-configuration2-javadoc-2.15.1-160000.1.2
* apache-commons-pool2-javadoc-2.13.1-160000.1.2
* apache-commons-net-3.13.0-160000.1.2
* apache-commons-configuration2-2.15.1-160000.1.2
* SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64)
* apache-commons-daemon-jsvc-1.6.1-160000.1.2
* apache-commons-daemon-1.6.1-160000.1.2
* apache-commons-daemon-jsvc-debuginfo-1.6.1-160000.1.2
* apache-commons-daemon-debugsource-1.6.1-160000.1.2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20260714/817de78d/attachment.htm>
More information about the sle-updates
mailing list