build.xml | 1 1 + 0 - 0 !
src/conf/MANIFEST.MF | 60 48 + 12 - 0 !
2 files changed, 49 insertions(+), 12 deletions(-)

 adds the osgi metadata to the manifest

src/java/org/apache/commons/collections/MultiHashMap.java | 2 1 + 1 - 0 !
src/java/org/apache/commons/collections/MultiMap.java | 2 1 + 1 - 0 !
src/java/org/apache/commons/collections/map/MultiKeyMap.java | 2 1 + 1 - 0 !
src/java/org/apache/commons/collections/map/MultiValueMap.java | 2 1 + 1 - 0 !
src/test/org/apache/commons/collections/TestMultiHashMap.java | 16 8 + 8 - 0 !
src/test/org/apache/commons/collections/map/TestMultiKeyMap.java | 4 2 + 2 - 0 !
src/test/org/apache/commons/collections/map/TestMultiValueMap.java | 18 9 + 9 - 0 !
7 files changed, 23 insertions(+), 23 deletions(-)

 renames the multimap.remove(object, object) method to removemapping()
 and MultiKeyMap.remove(Object, Object) to removeMultiKey(). This avoids a conflict
 with the new Map.remove(Object, Object) method introduced in Java 8. The new names
 are those used by Commons Collections 4 (packaged as libcommons-collections4-java).

src/java/org/apache/commons/collections/functors/CloneTransformer.java | 4 4 + 0 - 0 !
src/java/org/apache/commons/collections/functors/ForClosure.java | 4 4 + 0 - 0 !
src/java/org/apache/commons/collections/functors/FunctorUtils.java | 34 34 + 0 - 0 !
src/java/org/apache/commons/collections/functors/InstantiateFactory.java | 6 5 + 1 - 0 !
src/java/org/apache/commons/collections/functors/InstantiateTransformer.java | 4 4 + 0 - 0 !
src/java/org/apache/commons/collections/functors/InvokerTransformer.java | 4 4 + 0 - 0 !
src/java/org/apache/commons/collections/functors/PrototypeFactory.java | 10 10 + 0 - 0 !
src/java/org/apache/commons/collections/functors/WhileClosure.java | 4 4 + 0 - 0 !
8 files changed, 69 insertions(+), 1 deletion(-)

 disable the deserialization of the functors classes unless
 the system property org.apache.commons.collections.enableUnsafeSerialization
 is set to true.
 .
 This fixes a vulnerability in unsafe applications deserializing objects
 from untrusted sources without sanitizing the input data.
 .
 https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread