Uploaded image for project: 'MyFaces Core'
  1. MyFaces Core
  2. MYFACES-4020

Update commons-collections to 3.2.2

Attach filesAttach ScreenshotVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 2.2.8
    • 2.2.10
    • None
    • None

    Description

      2015-11-23 16:37 GMT-05:00 Mike Kienenberger:

      let's upgrade our commons-collections
      dependency to 3.2.2 as certain JSF configurations likely present
      attack vectors.

      https://issues.apache.org/jira/browse/COLLECTIONS-580

      Attachments

        Issue Links

        relates to

        Bug - A problem which impairs or prevents the functions of the product. COLLECTIONS-580 Arbitrary remote code execution with InvokerTransformer

        • Major - Major loss of function.
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            deki Dennis Kieselhorst
            deki Dennis Kieselhorst
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment