[ https://issues.apache.org/jira/browse/ACCUMULO-4056?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15009334#comment-15009334 ]
Josh Elser commented on ACCUMULO-4056: -------------------------------------- Is this a blocker for us? Commons-collections has it listed as "Major". I understand the risk in shipping the jar with the potential vulnerability, but I don't believe we directly use this InvokerTransformer anywhere, do we? > Update version of commons-collection to 3.2.2 when released > ----------------------------------------------------------- > > Key: ACCUMULO-4056 > URL: https://issues.apache.org/jira/browse/ACCUMULO-4056 > Project: Accumulo > Issue Type: Bug > Affects Versions: 1.5.4, 1.6.4, 1.7.0 > Reporter: Mike Drob > Priority: Blocker > Fix For: 1.7.1, 1.8.0 > > > See COLLECTIONS-580. -- This message was sent by Atlassian JIRA (v6.3.4#6332)