we dont need to cancel this one, we can do a 1.7.4 tomorrow if needed. There are still a very big part which is usable without the need of this fix.
Romain Manni-Bucau @rmannibucau <https://twitter.com/rmannibucau> | Blog <http://rmannibucau.wordpress.com> | Github <https://github.com/rmannibucau> | LinkedIn <https://www.linkedin.com/in/rmannibucau> | Tomitriber <http://www.tomitribe.com> 2015-12-03 1:56 GMT+01:00 Andy Gumbrecht <agumbre...@tomitribe.com>: > In order to provide users with the Apache Commons Collections 3.2.2 > critical security fix this vote is cancelled. > > The issue remains a general problem in usages of ObjectInputStream, which > should still filter at least known vulnerable classes. > > Andy. > > > -- > Andy Gumbrecht > https://twitter.com/AndyGeeDe > http://www.tomitribe.com > >
