• Type: Bug
• Resolution: Not A Defect
• Priority: Critical
• Component/s: core
• Labels:

  None

[JENKINS-31496] Security Problem: commons-collections 3.2.1 (should bump to 3.2.2)

cactusman created issue - 2015-11-11 03:56

cactusman made changes - 2015-11-11 08:53

Description

Original: *Security problem* http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/#thefix *Fixed* http://svn.apache.org/viewvc/commons/proper/collections/branches/COLLECTIONS_3_2_X/src/java/org/apache/commons/collections/functors/InvokerTransformer.java?view=log Jenkins will be updated fiexd commons-collections library.

New: *Security problem* http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/ *Fixed* http://svn.apache.org/viewvc/commons/proper/collections/branches/COLLECTIONS_3_2_X/src/java/org/apache/commons/collections/functors/InvokerTransformer.java?view=log Jenkins will be updated fiexd commons-collections library.

Daniel Beck made changes - 2015-11-17 12:14

Resolution		New: Not A Defect [ 7 ]
Status	Original: Open [ 1 ]	New: Resolved [ 5 ]

Antoine Musso made changes - 2015-11-17 12:59

Summary

Original: Securitye Problem: commons-collections

New: Security Problem: commons-collections 3.2.1 (should bump to 3.2.2)

R. Tyler Croy made changes - 2016-07-25 23:57

Workflow

Original: JNJira [ 166898 ]

New: JNJira + In-Review [ 198067 ]