myfaces-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <...@myfaces.apache.org>
Subject [jira] [Commented] (TOBAGO-1730) Update dependencies with respect to CVE
Date Wed, 05 Apr 2017 20:23:41 GMT

    [ https://issues.apache.org/jira/browse/TOBAGO-1730?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15957582#comment-15957582
] 

Hudson commented on TOBAGO-1730:
--------------------------------

SUCCESS: Integrated in Jenkins build Tobago 3.0.x #8 (See [https://builds.apache.org/job/Tobago%203.0.x/8/])
Merged from trunk
TOBAGO-1730: Update dependencies with respect to CVE [from revision 1790315] (lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1790316])
* (edit) tobago-3.0.x
* (edit) tobago-3.0.x/tobago-example/tobago-example-addressbook/pom.xml
Merged from trunk
TOBAGO-1730: Update dependencies with respect to CVE [from revision 1790312] (lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1790314])
* (edit) tobago-3.0.x
* (edit) tobago-3.0.x/pom.xml


> Update dependencies with respect to CVE
> ---------------------------------------
>
>                 Key: TOBAGO-1730
>                 URL: https://issues.apache.org/jira/browse/TOBAGO-1730
>             Project: MyFaces Tobago
>          Issue Type: Task
>          Components: Build
>            Reporter: Udo Schnurpfeil
>            Assignee: Udo Schnurpfeil
>            Priority: Trivial
>             Fix For: 3.0.4, 3.1.0
>
>
> * Using portlet api from apache instead of javax, because of parsing error of the pom.xml
(contains unknown entity reference &nbsp;
> * update logback because of CVE-2017-5929
> * update openjpa, because of asm dependency (only old addressbook)



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)

Mime
View raw message