history.xml is missing version 3.2.2.
git-svn-id: https://svn.apache.org/repos/asf/commons/proper/collections/branches/COLLECTIONS_3_2_X@1714253 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
parent
6a3dbcdcd7
commit
ad0f9faf5e
|
@ -104,6 +104,14 @@ Notably MultiValueMap is a new more flexible implementation of MultiHashMap.
|
|||
<b>Collections 3.2.1</b> Re-packaged v3.2 release which is OSGi enabled.
|
||||
</p>
|
||||
|
||||
<p>
|
||||
<b>Collections 3.2.2</b> Serialization support for unsafe classes in the functor package is disabled by default as
|
||||
this can be exploited for remote code execution attacks. To re-enable the feature the system property
|
||||
"org.apache.commons.collections.enableUnsafeSerialization" needs to be set to "true". Classes considered to be
|
||||
unsafe are: CloneTransformer, ForClosure, InstantiateFactory, InstantiateTransformer, InvokerTransformer,
|
||||
PrototypeCloneFactory, PrototypeSerializationFactory, WhileClosure. Fixes COLLECTIONS-580. Other bug fixes as well.
|
||||
</p>
|
||||
|
||||
</section>
|
||||
|
||||
</body>
|
||||
|
|
Loading…
Reference in New Issue