[juddi] branch master updated: Use HTTPS instead of HTTP to resolve dependencies

[al...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

alexoree pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/juddi.git


The following commit(s) were added to refs/heads/master by this push:
     new 444c35a  Use HTTPS instead of HTTP to resolve dependencies
     new 86d2149  Merge pull request #7 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
444c35a is described below

commit 444c35a72063e4c37187589d3af07801e807e6da
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:57:43 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies
    
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
    
    Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 9364d70..3c75b54 100644
--- a/pom.xml
+++ b/pom.xml
@@ -843,7 +843,7 @@ under the License.
 		<repository>
 			<id>jboss</id>
 			<name>JBoss Repository</name>
-			<url>http://repository.jboss.org/nexus/content/groups/public</url>
+			<url>https://repository.jboss.org/nexus/content/groups/public</url>
 			<layout>default</layout>
 		</repository>
 


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@juddi.apache.org
For additional commands, e-mail: commits-help@juddi.apache.org