You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@servicemix.apache.org by "Frank Joppe (JIRA)" <ji...@apache.org> on 2016/01/08 11:53:39 UTC

[jira] [Created] (SM-2805) Vulnerable Apache Commons Collection still installed?

Frank Joppe created SM-2805:
-------------------------------

             Summary: Vulnerable Apache Commons Collection still installed?
                 Key: SM-2805
                 URL: https://issues.apache.org/jira/browse/SM-2805
             Project: ServiceMix
          Issue Type: Bug
    Affects Versions: 6.1.0, 6.0.2
         Environment: Any
            Reporter: Frank Joppe


I have downloaded SMX6.1.0 from the front-page and I see that there is still a file "system/commons-collections/commons-collections/3.2.1/commons-collections-3.2.1.jar". I understand that this is still the version with the vulnarebility. Also if I list the packages from SMX 6.1.0, I see that package 178 is Commons Collections v3.2.1.

Do we still have the vulnarebility?



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)