You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@maven.apache.org by "Elliotte Rusty Harold (Jira)" <ji...@apache.org> on 2023/04/23 13:56:00 UTC

[jira] [Commented] (WAGON-625) Upgrade To commons-io 2.7

    [ https://issues.apache.org/jira/browse/WAGON-625?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17715462#comment-17715462 ] 

Elliotte Rusty Harold commented on WAGON-625:
---------------------------------------------

Why will Wagon 3.x remain on Java 7? Everything else is moving to Java 8.

> Upgrade To commons-io 2.7
> -------------------------
>
>                 Key: WAGON-625
>                 URL: https://issues.apache.org/jira/browse/WAGON-625
>             Project: Maven Wagon
>          Issue Type: Dependency upgrade
>    Affects Versions: 3.5.1
>            Reporter: Ryan Baxter
>            Priority: Major
>
> commons-io 2.6 is effected by CVE-2021-29425 which is addressed in 2.7
> https://nvd.nist.gov/vuln/detail/CVE-2021-29425



--
This message was sent by Atlassian Jira
(v8.20.10#820010)