[CONNECTORS-1565] Upgrade commons-collections to 3.2.2 (CVE-2015-6420) - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Bug
Status: Resolved
Priority: Critical
Resolution: Fixed
Affects Version/s: ManifoldCF 2.12
Fix Version/s: ManifoldCF 2.13
Component/s: Framework core
Labels:
None

Description

We should upgrade commons-collections to 3.2.2 due to a known security issue with 3.2.1

https://commons.apache.org/proper/commons-collections/security-reports.html

Further reading:
http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-andyour-application-have-in-common-this-vulnerability/
https://www.cvedetails.com/cve/CVE-2015-6420/

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending

CONNECTORS-1565.patch
08/Jan/19 22:35
2 kB
Markus Schuch

Activity

People

Assignee:: Markus Schuch

Reporter:: Markus Schuch

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 07/Jan/19 16:03

Updated:: 24/Jan/19 19:28

Resolved:: 24/Jan/19 19:28