Uploaded image for project: 'Commons Collections'
  1. Commons Collections
  2. COLLECTIONS-581

Deserialization and Apache Commons Collection

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Invalid
    • 3.0, 3.1, 3.2.1
    • None
    • Functor
    • Patch, Important

    Description

      Hi Team,

      This is regarding “commons-collections Java library”. In our applications we are widely using this library and hence looking to urgently patch the fix for vulnerability issue if it is available.
      Searching on internet we found one patch released on Sunday 08th Nov http://svn.apache.org/viewvc?view=revision&revision=1713307

      Just wanted to check with you if there is any updated / complied version of commons-collections jar available or going to be released soon which we can directly replace with our existing jar file that provides the fix for the vulnerability issue.

      Thanks in advance!

      Attachments

        Activity

          People

            markt Mark Thomas
            deepeshkapoor Deepesh
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: