cocoon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alfred Nathaniel (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (COCOON-2367) Update to xalan-2.7.2 and add serializer-2.7.2
Date Thu, 21 Feb 2019 16:28:00 GMT

    [ https://issues.apache.org/jira/browse/COCOON-2367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16774266#comment-16774266
] 

Alfred Nathaniel commented on COCOON-2367:
------------------------------------------

Committed fix to 2.1.13-dev.
http://svn.apache.org/viewvc?view=revision&revision=1853788


> Update to xalan-2.7.2 and add serializer-2.7.2
> ----------------------------------------------
>
>                 Key: COCOON-2367
>                 URL: https://issues.apache.org/jira/browse/COCOON-2367
>             Project: Cocoon
>          Issue Type: Improvement
>          Components: * Cocoon Core
>    Affects Versions: 2.1.12
>            Reporter: Alfred Nathaniel
>            Priority: Major
>             Fix For: 2.1.13
>
>
> Cocoon 2.1.12 uses xalan-2.7.1 which contains a security issue.  Upgrade to xalan-2.7.2
is straightforward.  Only the spawned-off serializer-2.7.2 jar must be added.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message