[ANNOUNCEMENT] Apache Commons Collections 4.1 Released

[Thomas Neidhart <tn...@apache.org>]

The Apache Commons team is pleased to announce the release of Apache
Commons Collections 4.1. The release is available for download at


http://commons.apache.org/proper/commons-collections/download_collections.cgi

Apache Commons Collections is a project to develop and maintain
collection classes based on and inspired by the JDK collection framework.

This Collections 4.1 release is a security and minor release, adding new
features and fixing several bugs present in the previous release of the
4.X branch.

Additionally, this release provides a fix for a known remote code
exploitation via the standard java object serialization mechanism.
Serialization support for unsafe classes in the functor package
has been removed. For more details, please refer to COLLECTIONS-580.

All users are strongly encouraged to updated to this release.

See the release-notes at

    http://commons.apache.org/proper/commons-collections/release_4_1.html
    http://www.apache.org/dist/commons/collections/RELEASE-NOTES.txt

for a full list of changes.

Please verify signatures using the KEYS file available at the above
location when downloading the release.

For complete information on collections, including instructions on how
to submit bug reports, patches, or suggestions for improvement, see the
Apache Commons Collections website:

    http://commons.apache.org/proper/commons-collections/

Thomas, on behalf of the Apache Commons team