Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-6748

Update commons collections from 3.2.2 to 4.1

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Trivial
    • Resolution: Done
    • Affects Version/s: Trunk
    • Fix Version/s: 16.11.01
    • Component/s: framework
    • Labels:
      None

      Description

      Even if we are covered from the Java Object possible deserialisation exploit by the 3.2.2 version, since it's easy to update, this issue to update the trunk to the last available release.

        Activity

        Hide
        jacques.le.roux Jacques Le Roux added a comment -

        Done at revision: 1717247

        Show
        jacques.le.roux Jacques Le Roux added a comment - Done at revision: 1717247
        Hide
        deepak.dixit Deepak Dixit added a comment -

        Hi Jacques ,

        Revision #1717247 not accessible.
        Am I missing something?
        https://fisheye6.atlassian.com/changelog/ofbiz?cs=1717247

        Show
        deepak.dixit Deepak Dixit added a comment - Hi Jacques , Revision #1717247 not accessible. Am I missing something? https://fisheye6.atlassian.com/changelog/ofbiz?cs=1717247
        Hide
        pfm.smits Pierre Smits added a comment -

        What is the update cycle of that tool?

        Show
        pfm.smits Pierre Smits added a comment - What is the update cycle of that tool?
        Hide
        deepak.dixit Deepak Dixit added a comment -

        Also I did not received any commit notification for this commit as well?

        Pierre, did you received any commit notification ?

        Show
        deepak.dixit Deepak Dixit added a comment - Also I did not received any commit notification for this commit as well? Pierre, did you received any commit notification ?
        Hide
        jacques.le.roux Jacques Le Roux added a comment -

        Hi Deepak,

        I see it here http://svn.apache.org/viewvc?view=revision&revision=1717247, not you?

        I did receive the notification in the dev ML and I can see it at also at http://markmail.org/message/cd3rctl5mdjqhwp7

        As 1st tools, I don't use much https://fisheye6.atlassian.com/changelog/ofbiz, nor Nabble. As Pierre suggested those have longer update cycles...

        Show
        jacques.le.roux Jacques Le Roux added a comment - Hi Deepak, I see it here http://svn.apache.org/viewvc?view=revision&revision=1717247 , not you? I did receive the notification in the dev ML and I can see it at also at http://markmail.org/message/cd3rctl5mdjqhwp7 As 1st tools, I don't use much https://fisheye6.atlassian.com/changelog/ofbiz , nor Nabble. As Pierre suggested those have longer update cycles...
        Hide
        deepak.dixit Deepak Dixit added a comment -

        Thanks Jacques. I am able to view these changes at http://svn.apache.org/viewvc?view=revision&revision=1717247

        Show
        deepak.dixit Deepak Dixit added a comment - Thanks Jacques. I am able to view these changes at http://svn.apache.org/viewvc?view=revision&revision=1717247
        Hide
        jacques.le.roux Jacques Le Roux added a comment -

        Hi Deepak, maybe you asked because I forgot to commit a change in TransactionUtil.java. It was committed yesterday by Gil at r1717333

        Show
        jacques.le.roux Jacques Le Roux added a comment - Hi Deepak, maybe you asked because I forgot to commit a change in TransactionUtil.java. It was committed yesterday by Gil at r1717333

          People

          • Assignee:
            jacques.le.roux Jacques Le Roux
            Reporter:
            jacques.le.roux Jacques Le Roux
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development