[ 
https://issues.apache.org/jira/browse/OFBIZ-6748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15031831#comment-15031831
 ] 

Jacques Le Roux commented on OFBIZ-6748:
----------------------------------------

Hi Deepak, 

I see it here http://svn.apache.org/viewvc?view=revision&revision=1717247, not 
you?

I did receive the notification in the dev ML and I can see it at also at 
http://markmail.org/message/cd3rctl5mdjqhwp7

As 1st tools, I don't use much https://fisheye6.atlassian.com/changelog/ofbiz, 
nor Nabble. As Pierre suggested those have longer update cycles...

> Update commons collections from 3.2.2 to 4.1
> --------------------------------------------
>
>                 Key: OFBIZ-6748
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-6748
>             Project: OFBiz
>          Issue Type: Improvement
>          Components: framework
>    Affects Versions: Trunk
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Trivial
>             Fix For: Upcoming Branch
>
>
> Even if we are covered from the Java Object possible deserialisation exploit 
> by the 3.2.2 version, since it's easy to update, this issue to update the 
> trunk to the last available release.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to