You are viewing a plain text version of this content. The canonical link for it is here.

Posted to general@xmlgraphics.apache.org by "Samael Bate (Jira)" <ji...@apache.org> on 2024/10/11 10:52:00 UTC

[jira] [Commented] (XGC-144) update to latest commons-io

    [ https://issues.apache.org/jira/browse/XGC-144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17888604#comment-17888604 ] 

Samael Bate commented on XGC-144:
---------------------------------

just seen that [https://github.com/apache/xmlgraphics-commons/commit/70d800f15b6251e1d3eb8e09f17a4ae23f435ab1] is in main already. Please release a new version asap.

> update to latest commons-io
> ---------------------------
>
>                 Key: XGC-144
>                 URL: https://issues.apache.org/jira/browse/XGC-144
>             Project: XMLGraphicsCommons
>          Issue Type: Task
>    Affects Versions: 2.10
>            Reporter: Samael Bate
>            Assignee: Simon Steiner
>            Priority: Major
>
> The latest xmlgraphics-commons 2.10 release still has security vulnerability due to it's dependency on commons-io 2.11.0 which is affected by:
> [https://osv.dev/vulnerability/GHSA-78wr-2p64-hpwj]
> fixed in 2.14.0 and above.
> The [latest commons-io|https://search.maven.org/artifact/commons-io/commons-io] at the minute is 2.17.0 so please update to this version



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: general-unsubscribe@xmlgraphics.apache.org
For additional commands, e-mail: general-help@xmlgraphics.apache.org