[
https://issues.apache.org/jira/browse/BATIK-1329?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17575022#comment-17575022
]
Sönke commented on BATIK-1329:
------------------------------
Hello,
is there any release plan, when we'll get a version with this fix included?
I've found no information on that.
Due we're using apache batik we are affected by the given security issue and
need a quick solution.
Regards
Sönke
> remove xalan dependency due to it being end of life
> ---------------------------------------------------
>
> Key: BATIK-1329
> URL: https://issues.apache.org/jira/browse/BATIK-1329
> Project: Batik
> Issue Type: Improvement
> Reporter: PJ Fanning
> Assignee: Simon Steiner
> Priority: Major
> Fix For: trunk
>
>
> Xalan is no longer supported.
> https://lists.apache.org/thread/s8kjny5270ssfcp46v0fl39lk98987w7
> It is better to use JAXP TransformerFactory than using xalan directly. If you
> add xalan dependency just to ensure that you have a JAXP compliant
> transformer on the classpath, this is unnecessary - the Java runtime has a
> built-in implementation.
> Batik use of xalan:
> * https://mvnrepository.com/artifact/org.apache.xmlgraphics/batik-dom/1.14
> * https://github.com/apache/xmlgraphics-batik/blob/trunk/build.xml
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: batik-dev-unsubscr...@xmlgraphics.apache.org
For additional commands, e-mail: batik-dev-h...@xmlgraphics.apache.org
