You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@servicemix.apache.org by ac...@apache.org on 2020/02/11 06:53:28 UTC
[servicemix-specs] branch master updated: Use HTTPS instead of HTTP
to resolve dependencies
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/servicemix-specs.git
The following commit(s) were added to refs/heads/master by this push:
new 61b8ecf Use HTTPS instead of HTTP to resolve dependencies
new 7bd4404 Merge pull request #15 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
61b8ecf is described below
commit 61b8ecf7cff1826b2ebccc0bf8cf33c190574c56
Author: Jonathan Leitschuh <Jo...@gmail.com>
AuthorDate: Mon Feb 10 19:29:57 2020 -0500
Use HTTPS instead of HTTP to resolve dependencies
This fixes a security vulnerability in this project where the `pom.xml`
files were configuring Maven to resolve dependencies over HTTP instead of
HTTPS.
Signed-off-by: Jonathan Leitschuh <Jo...@gmail.com>
---
jain-sip-api-1.2.1/pom.xml | 2 +-
jain-sip-api-1.2/pom.xml | 2 +-
jsr311-api-1.1.1/pom.xml | 2 +-
jsr311-api-1.1/pom.xml | 2 +-
4 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/jain-sip-api-1.2.1/pom.xml b/jain-sip-api-1.2.1/pom.xml
index d9d9611..add5296 100644
--- a/jain-sip-api-1.2.1/pom.xml
+++ b/jain-sip-api-1.2.1/pom.xml
@@ -44,7 +44,7 @@
<repositories>
<repository>
<id>jboss</id>
- <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public/</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
diff --git a/jain-sip-api-1.2/pom.xml b/jain-sip-api-1.2/pom.xml
index 87b7793..653aa4d 100644
--- a/jain-sip-api-1.2/pom.xml
+++ b/jain-sip-api-1.2/pom.xml
@@ -44,7 +44,7 @@
<repositories>
<repository>
<id>jboss</id>
- <url>http://repository.jboss.org/nexus/content/groups/public/</url>
+ <url>https://repository.jboss.org/nexus/content/groups/public/</url>
<snapshots>
<enabled>false</enabled>
</snapshots>
diff --git a/jsr311-api-1.1.1/pom.xml b/jsr311-api-1.1.1/pom.xml
index 72a6f40..20a252c 100644
--- a/jsr311-api-1.1.1/pom.xml
+++ b/jsr311-api-1.1.1/pom.xml
@@ -59,7 +59,7 @@
<repository>
<id>java.net.2</id>
<name>Java Net 2 Repository</name>
- <url>http://download.java.net/maven/2</url>
+ <url>https://download.java.net/maven/2</url>
<releases>
<enabled>true</enabled>
</releases>
diff --git a/jsr311-api-1.1/pom.xml b/jsr311-api-1.1/pom.xml
index 77ec5f6..42f5b51 100644
--- a/jsr311-api-1.1/pom.xml
+++ b/jsr311-api-1.1/pom.xml
@@ -59,7 +59,7 @@
<repository>
<id>java.net.2</id>
<name>Java Net 2 Repository</name>
- <url>http://download.java.net/maven/2</url>
+ <url>https://download.java.net/maven/2</url>
<releases>
<enabled>true</enabled>
</releases>