Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-47638

Upgrade to version 3.2.2 of apache commons-collections

    XMLWordPrintable

Details

    Description

      This v3.2.2 release is a bugfix release, fixing several bugs present in the previous releases of the 3.2 branch. Additionally, this release provides a mitigation for a known remote code exploitation via the standard java object serialization mechanism. By default, serialization support for unsafe classes in the functor package is disabled and will result in an exception when either trying to serialize or de-serialize an instance of these classes. For more details, please refer to COLLECTIONS-580.

      https://commons.apache.org/proper/commons-collections/release_3_2_2.html

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. CWD-4579 Upgrade to version 3.2.2 of apache commons-collections

          • Low - Low priority issues
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-46203 InvokerTransformer vulnerability

          • Low - Low priority issues
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. CONFSERVER-40130 Upgrade to version 3.2.2 of apache commons-collections

          • Low - Low priority issues
          • Closed
          included in

          [JIRA] CPU-209 JIRA 7.1.0-OD-04-012

          Activity

            People

              ohernandez@atlassian.com Oswaldo Hernandez (Inactive)
              dblack David Black
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: