Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-40130

Upgrade to version 3.2.2 of apache commons-collections

XMLWordPrintable

      This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for unsafe classes in the functor package is disabled and will result in an exception when either trying to serialize or de-serialize an instance of these classes. For more details, please refer to COLLECTIONS-580.

      https://commons.apache.org/proper/commons-collections/release_3_2_2.html

            [CONFSERVER-40130] Upgrade to version 3.2.2 of apache commons-collections

            Katherine Yabut made changes -
            Workflow Original: JAC Bug Workflow v3 [ 2893778 ] New: CONFSERVER Bug Workflow v4 [ 2985995 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow v2 [ 2775471 ] New: JAC Bug Workflow v3 [ 2893778 ]
            Status Original: Resolved [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: JAC Bug Workflow [ 2735971 ] New: JAC Bug Workflow v2 [ 2775471 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2395002 ] New: JAC Bug Workflow [ 2735971 ]
            Alex Yakovlev (Inactive) made changes -
            Labels Original: affects-server bugfix deserialization loyalty no-cvss-required security New: affects-server deserialization loyalty no-cvss-required security
            Alex Yakovlev (Inactive) made changes -
            Labels Original: affects-server bugfix deserialization no-cvss-required security New: affects-server bugfix deserialization loyalty no-cvss-required security
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 2290736 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2395002 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2228698 ] New: Confluence Workflow - Public Facing - Restricted v5 [ 2290736 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2185063 ] New: Confluence Workflow - Public Facing - Restricted v5.1 - TEMP [ 2228698 ]
            Katherine Yabut made changes -
            Workflow Original: Confluence Workflow - Public Facing - Restricted v5 [ 1929724 ] New: Confluence Workflow - Public Facing - Restricted v5 - TEMP [ 2185063 ]

              fxu Feng Xu (Inactive)
              dblack David Black
              Affected customers:
              0 This affects my team
              Watchers:
              6 Start watching this issue

                Created:
                Updated:
                Resolved: