Common-collections-3.0.jar

["Warner, Derek A" <de...@lmco.com>]

ALCON,
Trying to find info on common-collections-3.0.jar and if there are any CVEs or open security issues with this version? I cannot seem to find any information on this version. We had another version the ACC 3.2.1 which had an issue and was updated accordingly but 3.0 lacks info.

Please help.

V/r

Derek Warner
Lockheed Martin Aeronautics
Work: (407) 306-1048
Cell:   (407) 274-2547
MS, CISSP-ISSEP<https://www.credly.com/badges/c0af5dba-9ae8-44db-bef8-b29cd1443a7a/public_url>, CCSP<https://www.credly.com/badges/ad5bf4d9-a3d7-46bf-9ed5-0bb9a7f7687d/public_url>
[cid:image001.png@01D93703.F375E640]

Re: Common-collections-3.0.jar

[Gilles Sadowski <gi...@gmail.com>]

Le jeu. 2 févr. 2023 à 19:30, Warner, Derek A
<de...@lmco.com> a écrit :
>
> ALCON,

?

>
> Trying to find info on common-collections-3.0.jar and if there are any CVEs or open security issues with this version? I cannot seem to find any information on this version. We had another version the ACC 3.2.1 which had an issue and was updated accordingly but 3.0 lacks info.

Security info is here:
  https://commons.apache.org/proper/commons-collections/security-reports.html

Per
  https://commons.apache.org/proper/commons-collections/history.html
you should upgrade to v3.2.2 (if not 4.x if you expect support).

Regards,
Gilles

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@commons.apache.org
For additional commands, e-mail: user-help@commons.apache.org