I suppose doing both wouldn’t be unreasonable. It’ll take me a few weeks as I’m in the ramp up phase at a new gig. But I’ll start heading that direction.
-Rob > On Jun 5, 2019, at 8:39 AM, Melloware <melloware...@gmail.com> wrote: > > Do you think we could also get a BeanUtils2 release while we are at it? It > supports Java 8 and has many fixes in the last 3 years. > > > On 6/5/2019 8:37 AM, Rob Tompkins wrote: >> I can try to backport the fix to the 1.X branch. >> >> -Rob >> >> On 6/5/2019 8:09 AM, Melloware wrote: >>> Rob, >>> >>> I 100% agree since CVE-2014-0114 has been fixed in BeanUtils I think we >>> need a release. >>> >>> However the 1.X branch seems dormant it seems for the last 3 years >>> everything has been working on is BeanUtils2 which is where all the fixes >>> have been made? >>> >>> Mello >>> >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org >>> For additional commands, e-mail: dev-h...@commons.apache.org >>> --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org For additional commands, e-mail: dev-h...@commons.apache.org
