manifoldcf-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Markus Schuch (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CONNECTORS-1565) Upgrade commons-collections to 3.2.2 (CVE-2015-6420)
Date Mon, 07 Jan 2019 16:04:00 GMT
Markus Schuch created CONNECTORS-1565:
-----------------------------------------

             Summary: Upgrade commons-collections to 3.2.2 (CVE-2015-6420)
                 Key: CONNECTORS-1565
                 URL: https://issues.apache.org/jira/browse/CONNECTORS-1565
             Project: ManifoldCF
          Issue Type: Bug
          Components: Framework core
    Affects Versions: ManifoldCF 2.12
            Reporter: Markus Schuch
            Assignee: Markus Schuch
             Fix For: ManifoldCF next


We should upgrade commons-collections to 3.2.2 due to a known security issue with 3.2.1

https://commons.apache.org/proper/commons-collections/security-reports.html

Further reading:
[http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-andyour-application-have-in-common-this-vulnerability/]
[https://www.cvedetails.com/cve/CVE-2015-6420/]



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message