The Apache Commons team is pleased to announce the release of Apache Commons Collections 4.1. The release is available for download at http://commons.apache.org/proper/commons-collections/download_collections.cgi Apache Commons Collections is a project to develop and maintain collection classes based on and inspired by the JDK collection framework. This Collections 4.1 release is a security and minor release, adding new features and fixing several bugs present in the previous release of the 4.X branch. Additionally, this release provides a fix for a known remote code exploitation via the standard java object serialization mechanism. Serialization support for unsafe classes in the functor package has been removed. For more details, please refer to COLLECTIONS-580. All users are strongly encouraged to updated to this release. See the release-notes at http://commons.apache.org/proper/commons-collections/release_4_1.html http://www.apache.org/dist/commons/collections/RELEASE-NOTES.txt for a full list of changes. Please verify signatures using the KEYS file available at the above location when downloading the release. For complete information on collections, including instructions on how to submit bug reports, patches, or suggestions for improvement, see the Apache Commons Collections website: http://commons.apache.org/proper/commons-collections/ Thomas, on behalf of the Apache Commons team --------------------------------------------------------------------- To unsubscribe, e-mail: user-unsubscribe@commons.apache.org For additional commands, e-mail: user-help@commons.apache.org