Re: ActiveMQ and commons-collection "security vulnerabilty"

2015-12-10 Thread wabrit
Many thanks, and apologies for the duplicate post; I thought I'd searched for posts about this before opening this one, but I obviously couldn't have searched hard enough! -- View this message in context: http://activemq.2283324.n4.nabble.com/ActiveMQ-and-commons-collection-security-vulnerabil

ActiveMQ and commons-collection "security vulnerabilty"

2015-12-09 Thread wabrit
There has been a fair amount of coverage about a security vulnerability in certain versions of the Java commons collections library. The current version (5.13.0) of ActiveMQ installs with version 3.2.2 of commons-collections in the lib\optional folder. Are there any plans to uprev this version to