The ServiceMix team is pleased to announce the availability of Apache ServiceMix 5.5.2.
This new patch release contains a few bug fixes and picks up new version of Apache Camel. The new Apache Camel version included in this release also updates the Apache Commons Collections library to version 3.2.2 that contains a patch for a reported object de-serialization vulnerability [1] [1] https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread. Major dependency versions for this release: * Activiti 5.17.0 * Apache ActiveMQ 5.12.1 * Apache Camel 2.15.5 * Apache CXF 3.0.6 * Apache Karaf 2.4.3 More information about this new release can be found at http://servicemix.apache.org/downloads/servicemix-5.5.2.html