We are planning to do so "soon", there are a small number of technical issues that need to be addressed first. I'd say within 4 to 6 weeks.
Gary On Thu, Aug 29, 2024 at 11:57 AM Modi, Vinay (Berkeley Heights) <vinay.m...@fiserv.com.invalid> wrote: > > > Good Afternoon. We at Fiserv use Apache commons libraries in our web > applications. I am just curious to know when is Apache planning to release a > stable version of BeanUtils2. This is because we are still using BeanUtils > which in turn has a dependency on Apache Commons 3.2.2 > > A recent vulnerability discovered in Apache Commons 3.2.2 requires us to > upgrade this version, which means a new version of BeanUtils that uses Apache > Commons 4 > > Appreciate your feedback/response. > > > * There is a > resolution<https://issues.apache.org/jira/browse/COLLECTIONS-701> to the > vulnerability<https://issues.apache.org/jira/browse/COLLECTIONS-701> > available in commons-collections > (4.3<https://issues.apache.org/jira/issues/?jql=project+%3D+COLLECTIONS+AND+fixVersion+%3D+4.3>). > > > > Regards > Vinay --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscr...@commons.apache.org For additional commands, e-mail: user-h...@commons.apache.org