I have cross-checked and all looks good. I also put together a test for the AccessControlContext being set, both for MSF (which has been working for a long time but not explicitly tested) and for ConfigurationListener, which was broken until your fix (I reverted locally and saw the failure).
The test is available at https://github.com/apache/felix/pull/154 - Feel free to integrate it if you think it would be useful as a regression check. Tim On 12 Sep 2018, at 11:22, Carsten Ziegeler <cziege...@apache.org<mailto:cziege...@apache.org>> wrote: I've applied potential fixes for those issues. It would be great if you could cross check them as well, Tim Regards Carsten Carsten Ziegeler wrote Hi, it would be great if we could also fix FELIX-5918 and FELIX-5910 and then hopefully have addressed all security related issues. So if someone can provide patches for those, this would be preferred. In any case I can kick of the release end of this week Regards Carsten Timothy Ward wrote Hi all, I’m aware that there’s only been one bug fixed in Config Admin since the last release at the end of July, but I’m quite keen to see it available in a released version. I’ve created a PR (https://github.com/apache/felix/pull/153) to update the dependency versions in 1.9.5-SNAPSHOT so that it can be released. Is someone able to do the honours? Thanks, Tim -- Carsten Ziegeler Adobe Research Switzerland cziege...@apache.org<mailto:cziege...@apache.org>