Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 43CBF200B8B for ; Tue, 4 Oct 2016 15:48:39 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 428EB160AC9; Tue, 4 Oct 2016 13:48:39 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 7F998160AC5 for ; Tue, 4 Oct 2016 15:48:38 +0200 (CEST) Received: (qmail 6181 invoked by uid 500); 4 Oct 2016 13:48:37 -0000 Mailing-List: contact commits-help@flink.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@flink.apache.org Delivered-To: mailing list commits@flink.apache.org Received: (qmail 6172 invoked by uid 99); 4 Oct 2016 13:48:37 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Oct 2016 13:48:37 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 84A2FDFB92; Tue, 4 Oct 2016 13:48:37 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: mxm@apache.org To: commits@flink.apache.org Message-Id: <692a6ec3ee484ece8b63e327a057c2d6@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: flink git commit: [FLINK-4732] remove maven junction plugin Date: Tue, 4 Oct 2016 13:48:37 +0000 (UTC) archived-at: Tue, 04 Oct 2016 13:48:39 -0000 Repository: flink Updated Branches: refs/heads/master eece0dd05 -> 5a573c6bc [FLINK-4732] remove maven junction plugin On Windows, the plugin downloads and executes code from the author's web site. The downloaded file is not signed in the same way as Maven artifacts from Maven central which have to be signed with the developer's key. This could be a potential target for attackers. This closes #2586 Project: http://git-wip-us.apache.org/repos/asf/flink/repo Commit: http://git-wip-us.apache.org/repos/asf/flink/commit/5a573c6b Tree: http://git-wip-us.apache.org/repos/asf/flink/tree/5a573c6b Diff: http://git-wip-us.apache.org/repos/asf/flink/diff/5a573c6b Branch: refs/heads/master Commit: 5a573c6bc29c313d34981336d5bfc05185d323d2 Parents: eece0dd Author: Maximilian Michels Authored: Tue Oct 4 11:12:35 2016 +0200 Committer: Maximilian Michels Committed: Tue Oct 4 15:48:16 2016 +0200 ---------------------------------------------------------------------- flink-dist/pom.xml | 29 ----------------------------- 1 file changed, 29 deletions(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/flink/blob/5a573c6b/flink-dist/pom.xml ---------------------------------------------------------------------- diff --git a/flink-dist/pom.xml b/flink-dist/pom.xml index ec84adc..4687f20 100644 --- a/flink-dist/pom.xml +++ b/flink-dist/pom.xml @@ -268,35 +268,6 @@ under the License. - - - com.pyx4j - maven-junction-plugin - 1.0.3 - - - package - - link - - - - unlink - pre-clean - - unlink - - - - - - - ${project.basedir}/../build-target - ${project.basedir}/target/flink-${project.version}-bin/flink-${project.version} - - - -