You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@jclouds.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2019/11/15 15:04:00 UTC

[jira] [Commented] (JCLOUDS-1525) Update xmlbuilder dependency

    [ https://issues.apache.org/jira/browse/JCLOUDS-1525?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16975159#comment-16975159 ] 

ASF subversion and git services commented on JCLOUDS-1525:
----------------------------------------------------------

Commit 5f08ee2f1a3d5986b25f72e5dc102b7cd1fda773 in jclouds's branch refs/heads/master from Colm O hEigeartaigh
[ https://gitbox.apache.org/repos/asf?p=jclouds.git;h=5f08ee2 ]

JCLOUDS-1525 - Update xmlbuilder dependency (#52)



> Update xmlbuilder dependency
> ----------------------------
>
>                 Key: JCLOUDS-1525
>                 URL: https://issues.apache.org/jira/browse/JCLOUDS-1525
>             Project: jclouds
>          Issue Type: Improvement
>            Reporter: Colm O hEigeartaigh
>            Priority: Major
>             Fix For: 2.3.0, 2.2.1
>
>          Time Spent: 20m
>  Remaining Estimate: 0h
>
> The xmlbuilder dependency needs to be updated due to a security issue:
> java-xmlbuilder-1.1.jar (pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.1) : CWE-611: Improper Restriction of XML External Entity Reference ('XXE')
>  



--
This message was sent by Atlassian Jira
(v8.3.4#803005)