You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicemix.apache.org by ac...@apache.org on 2020/02/11 06:54:20 UTC

[servicemix-bundles] branch master updated: Use HTTPS instead of HTTP to resolve dependencies

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/servicemix-bundles.git


The following commit(s) were added to refs/heads/master by this push:
     new 446117e  Use HTTPS instead of HTTP to resolve dependencies
     new e0d1d61  Merge pull request #141 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
446117e is described below

commit 446117e22c4de751cb941a1b809ec14dfad39d54
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:45:26 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
 casbah-3.1.1/pom.xml               | 2 +-
 gentlyweb-utils-1.5/pom.xml        | 2 +-
 hapi-0.5.1/pom.xml                 | 2 +-
 hsqldb-1.8.0.10/pom.xml            | 2 +-
 jain-sip-ri-1.2.169/pom.xml        | 2 +-
 javassist-3.12.1.GA/pom.xml        | 2 +-
 jsmpp-2.1.0/pom.xml                | 2 +-
 neo4j-3.5.12/pom.xml               | 2 +-
 netty-3.2.10.Final/pom.xml         | 2 +-
 orbitz-consul-client-1.3.3/pom.xml | 2 +-
 restlet-1.1.10/pom.xml             | 2 +-
 rome-1.0/pom.xml                   | 2 +-
 scalaj-collection-1.0/pom.xml      | 2 +-
 smack-3.2.1/pom.xml                | 2 +-
 splunk-1.6.5.0/pom.xml             | 2 +-
 15 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/casbah-3.1.1/pom.xml b/casbah-3.1.1/pom.xml
index 83542e7..408906c 100644
--- a/casbah-3.1.1/pom.xml
+++ b/casbah-3.1.1/pom.xml
@@ -61,7 +61,7 @@
 	<repositories>
         <repository>
             <id>releases.scala-tools.org</id>
-            <url>http://scala-tools.org/repo-releases</url>
+            <url>https://scala-tools.org/repo-releases</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/gentlyweb-utils-1.5/pom.xml b/gentlyweb-utils-1.5/pom.xml
index 27c3ecb..5042903 100644
--- a/gentlyweb-utils-1.5/pom.xml
+++ b/gentlyweb-utils-1.5/pom.xml
@@ -50,7 +50,7 @@
     <repositories>
         <repository>
             <id>fusesource</id>
-            <url>http://repo.fusesource.com/nexus/content/groups/public/</url>
+            <url>https://repo.fusesource.com/nexus/content/groups/public/</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/hapi-0.5.1/pom.xml b/hapi-0.5.1/pom.xml
index 90afe6b..433d698 100644
--- a/hapi-0.5.1/pom.xml
+++ b/hapi-0.5.1/pom.xml
@@ -65,7 +65,7 @@
         <repository>
             <id>servicemix-m2-repo</id>
             <name>Servicemix Maven2 Repository</name>
-            <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+            <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
         </repository>
     </repositories>
 
diff --git a/hsqldb-1.8.0.10/pom.xml b/hsqldb-1.8.0.10/pom.xml
index 6b07327..cc22179 100644
--- a/hsqldb-1.8.0.10/pom.xml
+++ b/hsqldb-1.8.0.10/pom.xml
@@ -39,7 +39,7 @@
         <repository>
             <id>fusesource.m2all</id>
             <name>Fusesource Release Repository</name>
-            <url>http://repo.fusesource.com/maven2-all</url>
+            <url>https://repo.fusesource.com/maven2-all</url>
             <snapshots>
                 <enabled>false</enabled>
             </snapshots>
diff --git a/jain-sip-ri-1.2.169/pom.xml b/jain-sip-ri-1.2.169/pom.xml
index 90e9e7c..745d8e2 100644
--- a/jain-sip-ri-1.2.169/pom.xml
+++ b/jain-sip-ri-1.2.169/pom.xml
@@ -38,7 +38,7 @@
     <repositories>
         <repository>
             <id>jboss</id>
-            <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+            <url>https://repository.jboss.org/nexus/content/groups/public/</url>
             <snapshots>
                 <enabled>false</enabled>
             </snapshots>
diff --git a/javassist-3.12.1.GA/pom.xml b/javassist-3.12.1.GA/pom.xml
index 1c7a15d..6efcd3d 100644
--- a/javassist-3.12.1.GA/pom.xml
+++ b/javassist-3.12.1.GA/pom.xml
@@ -51,7 +51,7 @@
         <repository>
             <id>jboss</id>
             <name>New JBoss Maven2 Repository</name>
-            <url>http://repository.jboss.org/maven2-brew/</url>
+            <url>https://repository.jboss.org/maven2-brew/</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/jsmpp-2.1.0/pom.xml b/jsmpp-2.1.0/pom.xml
index d7544d6..9815530 100644
--- a/jsmpp-2.1.0/pom.xml
+++ b/jsmpp-2.1.0/pom.xml
@@ -88,7 +88,7 @@
         <repository>
             <id>servicemix</id>
             <name>Apache ServiceMix Repository</name>
-            <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+            <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/neo4j-3.5.12/pom.xml b/neo4j-3.5.12/pom.xml
index 540a26f..a4000dd 100644
--- a/neo4j-3.5.12/pom.xml
+++ b/neo4j-3.5.12/pom.xml
@@ -85,7 +85,7 @@
         <repository>
             <id>neo4j.repo</id>
             <name>neo4j Repository</name>
-            <url>http://m2.neo4j.org/content/repositories/releases</url>
+            <url>https://m2.neo4j.org/content/repositories/releases</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/netty-3.2.10.Final/pom.xml b/netty-3.2.10.Final/pom.xml
index 951e0bd..863b87d 100644
--- a/netty-3.2.10.Final/pom.xml
+++ b/netty-3.2.10.Final/pom.xml
@@ -61,7 +61,7 @@
             <!-- JBoss Maven2 Repository -->
             <id>jboss.m2</id>
             <name>JBoss Maven2 Repository</name>
-            <url>http://repository.jboss.org/nexus/content/groups/public</url>
+            <url>https://repository.jboss.org/nexus/content/groups/public</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/orbitz-consul-client-1.3.3/pom.xml b/orbitz-consul-client-1.3.3/pom.xml
index d7494a8..a034525 100644
--- a/orbitz-consul-client-1.3.3/pom.xml
+++ b/orbitz-consul-client-1.3.3/pom.xml
@@ -115,7 +115,7 @@
             </snapshots>
             <id>central</id>
             <name>bintray</name>
-            <url>http://jcenter.bintray.com</url>
+            <url>https://jcenter.bintray.com</url>
         </repository>
     </repositories>
 </project>
diff --git a/restlet-1.1.10/pom.xml b/restlet-1.1.10/pom.xml
index 30378ed..6242767 100644
--- a/restlet-1.1.10/pom.xml
+++ b/restlet-1.1.10/pom.xml
@@ -64,7 +64,7 @@
         <repository>
             <id>reslet.m2</id>
             <name>Restlet Maven2 Repository</name>
-            <url>http://maven.restlet.org</url>
+            <url>https://maven.restlet.org</url>
         </repository>
     </repositories>
 
diff --git a/rome-1.0/pom.xml b/rome-1.0/pom.xml
index 5565fd8..1add5f3 100644
--- a/rome-1.0/pom.xml
+++ b/rome-1.0/pom.xml
@@ -55,7 +55,7 @@
         <repository>
             <id>java.net</id>
             <name>Java.net Maven Repository</name>
-            <url>http://download.java.net/maven/2</url>
+            <url>https://download.java.net/maven/2</url>
         </repository>
     </repositories>
     
diff --git a/scalaj-collection-1.0/pom.xml b/scalaj-collection-1.0/pom.xml
index 3bc851e..de3d815 100644
--- a/scalaj-collection-1.0/pom.xml
+++ b/scalaj-collection-1.0/pom.xml
@@ -50,7 +50,7 @@
 	<repositories>
         <repository>
             <id>releases.scala-tools.org</id>
-            <url>http://scala-tools.org/repo-releases</url>
+            <url>https://scala-tools.org/repo-releases</url>
             <releases>
                 <enabled>true</enabled>
             </releases>
diff --git a/smack-3.2.1/pom.xml b/smack-3.2.1/pom.xml
index 2504a43..2017fad 100644
--- a/smack-3.2.1/pom.xml
+++ b/smack-3.2.1/pom.xml
@@ -98,7 +98,7 @@
         <repository>
             <id>smx-m2-repo</id>
             <name>ServiceMix Maven Repository</name>
-            <url>http://svn.apache.org/repos/asf/servicemix/m2-repo</url>
+            <url>https://svn.apache.org/repos/asf/servicemix/m2-repo</url>
         </repository>
     </repositories>
 
diff --git a/splunk-1.6.5.0/pom.xml b/splunk-1.6.5.0/pom.xml
index e706dff..9655966 100644
--- a/splunk-1.6.5.0/pom.xml
+++ b/splunk-1.6.5.0/pom.xml
@@ -71,7 +71,7 @@
         <repository>
             <id>splunk</id>
             <name>Splunk Artifactory</name>
-            <url>http://splunk.artifactoryonline.com/splunk/ext-releases-local/</url>
+            <url>https://splunk.artifactoryonline.com/splunk/ext-releases-local/</url>
             <releases>
                 <enabled>true</enabled>
             </releases>