[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-19 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15013494#comment-15013494 ] ASF GitHub Bot commented on FLINK-3005: --- Github user StephanEwen commented on the pull request:

[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-19 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15013560#comment-15013560 ] ASF GitHub Bot commented on FLINK-3005: --- Github user asfgit closed the pull request at:

[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-18 Thread Stephan Ewen (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15011226#comment-15011226 ] Stephan Ewen commented on FLINK-3005: - Important issue - we need to banish that from our classpath in

[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-18 Thread Ted Yu (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15011251#comment-15011251 ] Ted Yu commented on FLINK-3005: --- Would update to Commons Collections 3.2.2 alleviate the remote code

[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-18 Thread Stephan Ewen (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15011282#comment-15011282 ] Stephan Ewen commented on FLINK-3005: - Possibly, I am not an expert on this ;-) > Commons-collections

[jira] [Commented] (FLINK-3005) Commons-collections object deserialization remote command execution vulnerability

2015-11-18 Thread ASF GitHub Bot (JIRA)
[ https://issues.apache.org/jira/browse/FLINK-3005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15012108#comment-15012108 ] ASF GitHub Bot commented on FLINK-3005: --- GitHub user tedyu opened a pull request: