[
https://issues.apache.org/jira/browse/OFBIZ-6748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15031774#comment-15031774 ]
Pierre Smits commented on OFBIZ-6748:
-------------------------------------
What is the update cycle of that tool?
> Update commons collections from 3.2.2 to 4.1
> --------------------------------------------
>
> Key: OFBIZ-6748
> URL:
https://issues.apache.org/jira/browse/OFBIZ-6748> Project: OFBiz
> Issue Type: Improvement
> Components: framework
> Affects Versions: Trunk
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Trivial
> Fix For: Upcoming Branch
>
>
> Even if we are covered from the Java Object possible deserialisation exploit by the 3.2.2 version, since it's easy to update, this issue to update the trunk to the last available release.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
Locked
