history.xml is missing version 3.2.2.

git-svn-id: https://svn.apache.org/repos/asf/commons/proper/collections/branches/COLLECTIONS_3_2_X@1714253 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Gary D. Gregory 2015-11-13 18:55:07 +00:00
parent 6a3dbcdcd7
commit ad0f9faf5e
1 changed files with 8 additions and 0 deletions

View File

@ -104,6 +104,14 @@ Notably MultiValueMap is a new more flexible implementation of MultiHashMap.
<b>Collections 3.2.1</b> Re-packaged v3.2 release which is OSGi enabled.
</p>
<p>
<b>Collections 3.2.2</b> Serialization support for unsafe classes in the functor package is disabled by default as
this can be exploited for remote code execution attacks. To re-enable the feature the system property
"org.apache.commons.collections.enableUnsafeSerialization" needs to be set to "true". Classes considered to be
unsafe are: CloneTransformer, ForClosure, InstantiateFactory, InstantiateTransformer, InvokerTransformer,
PrototypeCloneFactory, PrototypeSerializationFactory, WhileClosure. Fixes COLLECTIONS-580. Other bug fixes as well.
</p>
</section>
</body>