fix potential zero day via commons-collections

owlcollab · Nov 10, 2015 · 6d76b06 · 6d76b06
1 parent 3178fac
commit 6d76b06
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/OWLTools-Parent/.gitignore b/OWLTools-Parent/.gitignore
@@ -1,2 +1,4 @@
 target/
 work/
+/fixit/
+/deploy_fixit.sh
diff --git a/OWLTools-Parent/pom.xml b/OWLTools-Parent/pom.xml
@@ -290,6 +290,11 @@
 				<artifactId>commons-io</artifactId>
 				<version>2.2</version>
 			</dependency>
+			<dependency>
+				<groupId>commons-collections</groupId>
+				<artifactId>commons-collections</artifactId>
+				<version>3.2.1-fixit</version> <!-- This version does not contain a zero day exploit class InvokeTransformer -->
+			</dependency>
 			<dependency>
 				<groupId>org.semanticweb.elk</groupId>
 				<artifactId>elk-owlapi</artifactId>