commons-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Deepesh (JIRA)" <>
Subject [jira] [Commented] (COLLECTIONS-581) Deserialization and Apache Commons Collection
Date Tue, 10 Nov 2015 10:07:10 GMT


Deepesh commented on COLLECTIONS-581:

Thanks Mark, i have dropped an email to '' and  ''.
Kindly let me know if this is fine.

> Deserialization and Apache Commons Collection
> ---------------------------------------------
>                 Key: COLLECTIONS-581
>                 URL:
>             Project: Commons Collections
>          Issue Type: Bug
>          Components: Functor
>    Affects Versions: 3.0, 3.1, 3.2.1
>            Reporter: Deepesh
>            Assignee: Mark Thomas
>              Labels: patch
> Hi Team,
> This is regarding “commons-collections Java library”. In our applications we are
widely using this library and hence looking to urgently patch the fix for vulnerability issue
if it is available.
> Searching on internet we found one patch released on Sunday 08th Nov
> Just wanted to check with you if there is any updated / complied version of commons-collections
jar available or going to be released soon which we can directly replace with our existing
jar file that provides the fix for the vulnerability issue.
> Thanks in advance!

This message was sent by Atlassian JIRA

View raw message