Hi all,
in order to provide a work-around for the known remote code exploit via
java de-serialization of malicious InvokerTransformer instances, I would
like to start a vote to release Commons Collections 3.2.2 based on RC3.
Notes:
* the site will not be published, it just serves as a reference
On Thu, Nov 12, 2015 at 12:25 PM, Gary Gregory
wrote:
> Updating to Java 8 would be fine with me. You could write a [poll] email
> thread the ML to gauge interest.
>
First, thanks for your interest in contributing, Cory!
I am not sure this idea belongs in GOP itself. A GOP is not an applicati
I do not think one of the contributor's name need to be in ALL CAPS.
Gary
-- Forwarded message --
From:
Date: Thu, Nov 12, 2015 at 12:17 PM
Subject: svn commit: r1714114 - /commons/proper/io/trunk/RELEASE-NOTES.txt
To: comm...@commons.apache.org
Author: krosenvold
Date: Thu Nov
I think I saw a /. article about this yesterday... yikes.
G
On Wed, Nov 11, 2015 at 12:30 AM, Bernd Eckenfels
wrote:
> Hello,
>
> BTW Oracle issued a "Strange" Security alert:
>
> 2015-4852 was released on November 10th, 2015.
>
> This vulnerability, which involves the Apache Commons and Oracle
On 11/12/2015 07:14 PM, Jörg Schaible wrote:
> Hi Thomas,
>
> Thomas Neidhart wrote:
>
>> Hi all,
>>
>> in order to provide a work-around for the known remote code exploit via
>> java de-serialization of malicious InvokerTransformer instances, I would
>> like to start a vote to release Commons Co
On 11/11/2015 05:27 PM, Thomas Neidhart wrote:
> Hi all,
>
> in order to provide a work-around for the known remote code exploit via
> java de-serialization of malicious InvokerTransformer instances, I would
> like to start a vote to release Commons Collections 3.2.2 based on RC2.
>
> Notes:
>
>
Updating to Java 8 would be fine with me. You could write a [poll] email
thread the ML to gauge interest.
Gary
On Thu, Nov 12, 2015 at 11:03 AM, Cory Klein wrote:
> > The first hurdle here is that pool is not on Java 8. But this could be
> done
> > with other facilities like Runnable, Callable,
> The first hurdle here is that pool is not on Java 8. But this could be done
> with other facilities like Runnable, Callable, maybe even an executor.
Although Callable wouldn't be as elegant as lambdas, it would
definitely be possible. The consumer could define a Callable:
class ResourceCallable
Hi Thomas,
Thomas Neidhart wrote:
> Hi all,
>
> in order to provide a work-around for the known remote code exploit via
> java de-serialization of malicious InvokerTransformer instances, I would
> like to start a vote to release Commons Collections 3.2.2 based on RC2.
>
> Notes:
>
> * the sit
The first hurdle here is that pool is not on Java 8. But this could be done
with other facilities like Runnable, Callable, maybe even an executor.
Gary
On Nov 12, 2015 9:47 AM, "Cory Klein" wrote:
> First off, hello! My name is Cory Klein and this marks my first
> interaction with this group. I'
First off, hello! My name is Cory Klein and this marks my first
interaction with this group. I've read through the email guidelines
and I think I have something productive to discuss here.
In looking at GenericObjectPool I came across a process that I believe
could be improved upon and I wanted to
On Nov 11, 2015 11:45 PM, "Emmanuel Bourg" wrote:
>
> Le 12/11/2015 04:39, Phil Steitz a écrit :
>
> > That is frankly ridiculous. To -1 a release based on false positive
report about files not included in the release is absurd.
>
> I agree with Phil. We are releasing code, not reports.
Keep in
Le 2015-11-12 10:18, Stefan Bodewig a écrit :
On 2015-11-11, Thomas Neidhart wrote:
Please review the release candidate and vote.
+1 for the release.
Luc
+1
Stefan
-
To unsubscribe, e-mail: dev-unsubscr...@commons.apac
On 2015-11-11, Thomas Neidhart wrote:
> Please review the release candidate and vote.
+1
Stefan
-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For additional commands, e-mail: dev-h...@commons.apache.org
On 2015-11-12, Phil Steitz wrote:
>> On Nov 11, 2015, at 12:05 PM, Gary Gregory wrote:
>> -1
> That is frankly ridiculous.
Couldn't agree more.
Stefan
-
To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
For addition
15 matches
Mail list logo
