You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@flink.apache.org by se...@apache.org on 2015/11/19 14:46:18 UTC
[2/2] flink git commit: [FLINK-3005] [core] Bump commons-collections
version to fix object deserialization remote command execution vulnerability
[FLINK-3005] [core] Bump commons-collections version to fix object deserialization remote command execution vulnerability
This closes #1381
Project: http://git-wip-us.apache.org/repos/asf/flink/repo
Commit: http://git-wip-us.apache.org/repos/asf/flink/commit/20612063
Tree: http://git-wip-us.apache.org/repos/asf/flink/tree/20612063
Diff: http://git-wip-us.apache.org/repos/asf/flink/diff/20612063
Branch: refs/heads/master
Commit: 206120631d97898c9396d74b2450eb36af17e06a
Parents: 6b253d9
Author: tedyu <yu...@gmail.com>
Authored: Wed Nov 18 13:56:31 2015 -0800
Committer: Stephan Ewen <se...@apache.org>
Committed: Thu Nov 19 14:45:44 2015 +0100
----------------------------------------------------------------------
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/flink/blob/20612063/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index af4ff8d..95c7b6e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -210,7 +210,7 @@ under the License.
<dependency>
<groupId>commons-collections</groupId>
<artifactId>commons-collections</artifactId>
- <version>3.2.1</version>
+ <version>3.2.2</version>
</dependency>
<dependency>