[jira] [Updated] (SLING-12291) Broken backwards compatibility for duplicated keys

2024-04-12 Thread Robert Munteanu (Jira)


 [ 
https://issues.apache.org/jira/browse/SLING-12291?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Munteanu updated SLING-12291:

Fix Version/s: Commons JSON 2.0.26
   (was: Commons JSON 2.0.24)

> Broken backwards compatibility for duplicated keys
> --
>
> Key: SLING-12291
> URL: https://issues.apache.org/jira/browse/SLING-12291
> Project: Sling
>  Issue Type: Bug
>Affects Versions: Commons JSON 2.0.24
>Reporter: Remo Liechti
>Assignee: Remo Liechti
>Priority: Major
> Fix For: Commons JSON 2.0.26
>
>
> The fix of CVE-2022-47937 introduced an invalid backwards compatibility for 
> duplicated keys in a json.
> New behaviour: throws an exception on duplicated keys
> Old behaviour: ignores the fact and is able to process json with duplicated 
> keys.
> To no break existing users of the library, reestablish the old behaviour.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (SLING-12291) Broken backwards compatibility for duplicated keys

2024-04-11 Thread Robert Munteanu (Jira)


 [ 
https://issues.apache.org/jira/browse/SLING-12291?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Robert Munteanu updated SLING-12291:

Fix Version/s: Commons JSON 2.0.24

> Broken backwards compatibility for duplicated keys
> --
>
> Key: SLING-12291
> URL: https://issues.apache.org/jira/browse/SLING-12291
> Project: Sling
>  Issue Type: Bug
>Affects Versions: Commons JSON 2.0.24
>Reporter: Remo Liechti
>Priority: Major
> Fix For: Commons JSON 2.0.24
>
>
> The fix of CVE-2022-47937 introduced an invalid backwards compatibility for 
> duplicated keys in a json.
> New behaviour: throws an exception on duplicated keys
> Old behaviour: ignores the fact and is able to process json with duplicated 
> keys.
> To no break existing users of the library, reestablish the old behaviour.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)


[jira] [Updated] (SLING-12291) Broken backwards compatibility for duplicated keys

2024-04-11 Thread Remo Liechti (Jira)


 [ 
https://issues.apache.org/jira/browse/SLING-12291?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Remo Liechti updated SLING-12291:
-
Affects Version/s: Commons JSON 2.0.24

> Broken backwards compatibility for duplicated keys
> --
>
> Key: SLING-12291
> URL: https://issues.apache.org/jira/browse/SLING-12291
> Project: Sling
>  Issue Type: Bug
>Affects Versions: Commons JSON 2.0.24
>Reporter: Remo Liechti
>Priority: Major
>
> The fix of CVE-2022-47937 introduced an invalid backwards compatibility for 
> duplicated keys in a json.
> New behaviour: throws an exception on duplicated keys
> Old behaviour: ignores the fact and is able to process json with duplicated 
> keys.
> To no break existing users of the library, reestablish the old behaviour.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)