ksobkowiak wrote > The ServiceMix team is pleased to announce the availability of Apache > ServiceMix 6.0.2. > > > The new Apache Camel version included in this release also updates the > Apache Commons > Collections library to version 3.2.2 that contains a patch for a reported > object de-serialization vulnerability > <https://blogs.apache.org/foundation/entry/apache_commons_statement_to_widespread>.
Hi, Why does this release still contains "apache-servicemix-6.0.2/system/commons-collections/commons-collections/3.2.1/commons-collections-3.2.1.jar" and not "apache-servicemix-6.0.2/system/commons-collections/commons-collections/3.2.2/commons-collections-3.2.2.jar" ? Regards, Joop -- View this message in context: http://servicemix.396122.n5.nabble.com/ANN-Apache-ServiceMix-6-0-2-released-tp5723299p5723338.html Sent from the ServiceMix - Dev mailing list archive at Nabble.com.
