And there was a security fix made in "commons collections". (We
actually produced an R-build with this change already, but that was a "off-schedule"
for those using the fix in patches ... but not everyone "on the train"
has updated yet, since I still see the 3.2.0 version in .../releases/maintenance