[jira] [Resolved] (XERCESJ-1697) CLONE - XercesImpl 2.12.0 is not available on maven central - Manually upload new jar

["Michael Glavassevich (JIRA)" <xe...@xml.apache.org>]

     [ https://issues.apache.org/jira/browse/XERCESJ-1697?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Michael Glavassevich resolved XERCESJ-1697.
-------------------------------------------
    Resolution: Duplicate

You're making the same request as the opener of XERCESJ-1695. Please use that issue for discussion. Opening multiple JIRA issues doesn't increase the likelihood that someone will complete this task.

> CLONE - XercesImpl 2.12.0 is not available on maven central - Manually upload new jar
> -------------------------------------------------------------------------------------
>
>                 Key: XERCESJ-1697
>                 URL: https://issues.apache.org/jira/browse/XERCESJ-1697
>             Project: Xerces2-J
>          Issue Type: Bug
>    Affects Versions: 2.12.0
>            Reporter: Michael Ahern
>            Priority: Major
>
> The xercesImpl version 2.12 jar is not. This version is needed to gain access to the latest Xerces security fixes (e.g. [https://nvd.nist.gov/vuln/detail/CVE-2012-0881).]
> A number of open source projects are using insecure Xerces versions due to the lack of an up-to-date XercesImpl.jar in the maven central repository.
> https://mvnrepository.com/artifact/xerces/xercesImpl



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

---------------------------------------------------------------------
To unsubscribe, e-mail: j-dev-unsubscribe@xerces.apache.org
For additional commands, e-mail: j-dev-help@xerces.apache.org