maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (MNG-6312) Update Maven Wagon dependency
Date Sun, 14 Jan 2018 10:43:00 GMT

    [ https://issues.apache.org/jira/browse/MNG-6312?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16325500#comment-16325500
] 

Hudson commented on MNG-6312:
-----------------------------

Build succeeded in Jenkins: Maven TLP (wip) » maven » master #27

See https://builds.apache.org/job/maven-wip/job/maven/job/master/27/

> Update Maven Wagon dependency
> -----------------------------
>
>                 Key: MNG-6312
>                 URL: https://issues.apache.org/jira/browse/MNG-6312
>             Project: Maven
>          Issue Type: Dependency upgrade
>    Affects Versions: 3.5.0
>            Reporter: Sylwester Lachiewicz
>            Assignee: Karl Heinz Marbaise
>             Fix For: 3.5.3
>
>
> Based on OWASP report - update Maven Wagon from 2.12 to 3.0.0 to fix known vulnerability
in shaded jsoup
> wagon-http-2.12-shaded.jar\META-INF/maven/org.jsoup/jsoup/pom.xml (cpe:/a:jsoup:jsoup:1.7.2,
org.jsoup:jsoup:1.7.2) : CVE-2015-6748



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message