[jira] [Created] (VELTOOLS-169) Upgrade commons-collections compile dependency to 4.1

2015-11-30 Thread Mark Symons (JIRA)
Mark Symons created VELTOOLS-169: Summary: Upgrade commons-collections compile dependency to 4.1 Key: VELTOOLS-169 URL: https://issues.apache.org/jira/browse/VELTOOLS-169 Project: Velocity Tools

[jira] [Comment Edited] (VELOCITY-869) Vulnerability in dependency: commons-collections:3.2.1

2015-11-30 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELOCITY-869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15032067#comment-15032067 ] Mark Symons edited comment on VELOCITY-869 at 11/30/15 4:54 PM: Linked

[jira] [Commented] (VELOCITY-869) Vulnerability in dependency: commons-collections:3.2.1

2015-11-30 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELOCITY-869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15032067#comment-15032067 ] Mark Symons commented on VELOCITY-869: -- Linked to VELTOOLS-169, as Velocity Tools pulls in Velocity

[jira] [Created] (VELTOOLS-170) Upgrade beanutils to 1.9.2

2016-05-07 Thread Mark Symons (JIRA)
Mark Symons created VELTOOLS-170: Summary: Upgrade beanutils to 1.9.2 Key: VELTOOLS-170 URL: https://issues.apache.org/jira/browse/VELTOOLS-170 Project: Velocity Tools Issue Type: Bug

[jira] [Updated] (VELTOOLS-170) Upgrade beanutils to 1.9.2

2016-11-28 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Symons updated VELTOOLS-170: - Description: Update dependency on commons-beanutils:commons-beanutils to v1.9.2 and mitigate

[jira] [Updated] (VELTOOLS-170) Upgrade beanutils to 1.9.2 & supress access to class and Class

2016-11-28 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-170?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Symons updated VELTOOLS-170: - Summary: Upgrade beanutils to 1.9.2 & supress access to class and Class (was: Upgrade

[jira] [Commented] (VELOCITY-869) Vulnerability in dependency: commons-collections:3.2.1

2016-11-02 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELOCITY-869?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15629734#comment-15629734 ] Mark Symons commented on VELOCITY-869: -- No matter how straight-forward to It may be tweak the

[jira] [Commented] (VELTOOLS-172) Upgrade to supported, secure version of Apache Commons Validator

2017-03-29 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-172?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15947412#comment-15947412 ] Mark Symons commented on VELTOOLS-172: -- FYI: CVE-2014-0114 is a threat linked to Apache Commons

[jira] [Commented] (VELTOOLS-170) Upgrade beanutils to 1.9.2 & supress access to class and Class

2017-07-28 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-170?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=16105338#comment-16105338 ] Mark Symons commented on VELTOOLS-170: -- I am not a developer and so am not able to really opine on

[jira] [Updated] (VELTOOLS-169) Upgrade or remove commons-collections compile dependency

2018-08-03 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Symons updated VELTOOLS-169: - Description: Remove commons-collection dependency, ot upgrade commons-collections to v3.2.2

[jira] [Updated] (VELTOOLS-169) Upgrade or remove commons-collections compile dependency

2018-08-03 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Symons updated VELTOOLS-169: - Description: Remove commons-collection dependency, or upgrade commons-collections to v3.2.2

[jira] [Reopened] (VELTOOLS-169) Upgrade commons-collections compile dependency to v3.2.2 or v4.1

2018-08-03 Thread Mark Symons (JIRA)
[ https://issues.apache.org/jira/browse/VELTOOLS-169?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Mark Symons reopened VELTOOLS-169: -- Re-opening issue, together with edits so that it becomes "Upgrade *or remove*", thus allowing