[
https://issues.apache.org/jira/browse/ACCUMULO-4056?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15009334#comment-15009334
]
Josh Elser commented on ACCUMULO-4056:
--------------------------------------
Is this a blocker for us? Commons-collections has it listed as "Major". I
understand the risk in shipping the jar with the potential vulnerability, but I
don't believe we directly use this InvokerTransformer anywhere, do we?
> Update version of commons-collection to 3.2.2 when released
> -----------------------------------------------------------
>
> Key: ACCUMULO-4056
> URL: https://issues.apache.org/jira/browse/ACCUMULO-4056
> Project: Accumulo
> Issue Type: Bug
> Affects Versions: 1.5.4, 1.6.4, 1.7.0
> Reporter: Mike Drob
> Priority: Blocker
> Fix For: 1.7.1, 1.8.0
>
>
> See COLLECTIONS-580.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
