[
https://issues.apache.org/jira/browse/OFBIZ-6748?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15031831#comment-15031831
]
Jacques Le Roux commented on OFBIZ-6748:
----------------------------------------
Hi Deepak,
I see it here http://svn.apache.org/viewvc?view=revision&revision=1717247, not
you?
I did receive the notification in the dev ML and I can see it at also at
http://markmail.org/message/cd3rctl5mdjqhwp7
As 1st tools, I don't use much https://fisheye6.atlassian.com/changelog/ofbiz,
nor Nabble. As Pierre suggested those have longer update cycles...
> Update commons collections from 3.2.2 to 4.1
> --------------------------------------------
>
> Key: OFBIZ-6748
> URL: https://issues.apache.org/jira/browse/OFBIZ-6748
> Project: OFBiz
> Issue Type: Improvement
> Components: framework
> Affects Versions: Trunk
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Trivial
> Fix For: Upcoming Branch
>
>
> Even if we are covered from the Java Object possible deserialisation exploit
> by the 3.2.2 version, since it's easy to update, this issue to update the
> trunk to the last available release.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)