[jira] [Commented] (OFBIZ-6748) Update commons collections from 3.2.2 to 4.1

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-6748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15031831#comment-15031831 ]

Jacques Le Roux commented on OFBIZ-6748:
----------------------------------------

Hi Deepak,

I see it here http://svn.apache.org/viewvc?view=revision&revision=1717247, not you?

I did receive the notification in the dev ML and I can see it at also at http://markmail.org/message/cd3rctl5mdjqhwp7

As 1st tools, I don't use much https://fisheye6.atlassian.com/changelog/ofbiz, nor Nabble. As Pierre suggested those have longer update cycles...

> Update commons collections from 3.2.2 to 4.1
> --------------------------------------------
>
>                 Key: OFBIZ-6748
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6748
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Trivial
>             Fix For: Upcoming Branch
>
>
> Even if we are covered from the Java Object possible deserialisation exploit by the 3.2.2 version, since it's easy to update, this issue to update the trunk to the last available release.

--
This message was sent by Atlassian JIRA
(v6.3.4#6332)