From e7e028cadd541aeaa97adfbf09dcfb3f44fc3299 Mon Sep 17 00:00:00 2001
From: akhil <akhilk14@gmail.com>
Date: Sun, 8 May 2016 09:16:45 -0400
Subject: [PATCH] Pull #3162: Update version of commons-collections to 3.2.2 to
 fix security vulnerability CVE-2015-6420

---
 pom.xml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/pom.xml b/pom.xml
index 4b50baaf3..7a49e95be 100644
--- a/pom.xml
+++ b/pom.xml
@@ -232,6 +232,21 @@
       <groupId>commons-beanutils</groupId>
       <artifactId>commons-beanutils</artifactId>
       <version>1.9.2</version>
+      <!--Upgrading to commons-collections 3.2.2 to fix security vulnerability CVE-2015-6420.
+       This change can be reverted when upgrading to commons-beanutils 1.9.3
+       https://issues.apache.org/jira/browse/BEANUTILS-482-->
+      <exclusions>
+        <exclusion>
+          <groupId>commons-collections</groupId>
+          <artifactId>commons-collections</artifactId>
+        </exclusion>
+      </exclusions>
+    </dependency>
+    <!-- remove commons-collections dependency after commons-beanutils 1.9.3 -->
+    <dependency>
+      <groupId>commons-collections</groupId>
+      <artifactId>commons-collections</artifactId>
+      <version>3.2.2</version>
     </dependency>
     <dependency>
       <groupId>commons-cli</groupId>