Re: Common-collections-3.0.jar

2023-02-02 Thread Gilles Sadowski
Le jeu. 2 févr. 2023 à 19:30, Warner, Derek A
 a écrit :
>
> ALCON,

?

>
> Trying to find info on common-collections-3.0.jar and if there are any CVEs 
> or open security issues with this version? I cannot seem to find any 
> information on this version. We had another version the ACC 3.2.1 which had 
> an issue and was updated accordingly but 3.0 lacks info.

Security info is here:
  https://commons.apache.org/proper/commons-collections/security-reports.html

Per
  https://commons.apache.org/proper/commons-collections/history.html
you should upgrade to v3.2.2 (if not 4.x if you expect support).

Regards,
Gilles

-
To unsubscribe, e-mail: user-unsubscr...@commons.apache.org
For additional commands, e-mail: user-h...@commons.apache.org



Common-collections-3.0.jar

2023-02-02 Thread Warner, Derek A
ALCON,
Trying to find info on common-collections-3.0.jar and if there are any CVEs or 
open security issues with this version? I cannot seem to find any information 
on this version. We had another version the ACC 3.2.1 which had an issue and 
was updated accordingly but 3.0 lacks info.

Please help.

V/r

Derek Warner
Lockheed Martin Aeronautics
Work: (407) 306-1048
Cell:   (407) 274-2547
MS, 
CISSP-ISSEP<https://www.credly.com/badges/c0af5dba-9ae8-44db-bef8-b29cd1443a7a/public_url>,
 
CCSP<https://www.credly.com/badges/ad5bf4d9-a3d7-46bf-9ed5-0bb9a7f7687d/public_url>
[cid:image001.png@01D93703.F375E640]