[FLINK-3005] [core] Bump commons-collections version to fix object 
deserialization remote command execution vulnerability

This closes #1381


Project: http://git-wip-us.apache.org/repos/asf/flink/repo
Commit: http://git-wip-us.apache.org/repos/asf/flink/commit/7441799e
Tree: http://git-wip-us.apache.org/repos/asf/flink/tree/7441799e
Diff: http://git-wip-us.apache.org/repos/asf/flink/diff/7441799e

Branch: refs/heads/release-0.10
Commit: 7441799ef7e526d352e3e03b96aa2be2ba30171b
Parents: e977d82
Author: tedyu <yuzhih...@gmail.com>
Authored: Wed Nov 18 13:56:31 2015 -0800
Committer: Stephan Ewen <se...@apache.org>
Committed: Thu Nov 19 14:49:00 2015 +0100

----------------------------------------------------------------------
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/flink/blob/7441799e/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index e161614..ac7eaba 100644
--- a/pom.xml
+++ b/pom.xml
@@ -210,7 +210,7 @@ under the License.
                        <dependency>
                                <groupId>commons-collections</groupId>
                                <artifactId>commons-collections</artifactId>
-                               <version>3.2.1</version>
+                               <version>3.2.2</version>
                        </dependency>
 
                        <dependency>

Reply via email to