This is an automated email from the ASF dual-hosted git repository.
olamy pushed a commit to branch archiva-2.x
in repository https://gitbox.apache.org/repos/asf/archiva.git
The following commit(s) were added to refs/heads/archiva-2.x by this push:
new 5fa6e3107 [MRM-2048] upgrade xerces due to CVE (#103)
5fa6e3107 is described below
commit 5fa6e3107622ed9f3879e6ad82388207f8b5969a
Author: PJ Fanning <[email protected]>
AuthorDate: Tue May 31 11:33:30 2022 +0100
[MRM-2048] upgrade xerces due to CVE (#103)
---
pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/pom.xml b/pom.xml
index 291dfd583..1e1ccee54 100644
--- a/pom.xml
+++ b/pom.xml
@@ -53,7 +53,7 @@
<maven.compiler.target>8</maven.compiler.target>
<commons-codec.version>1.6</commons-codec.version>
- <commons-collections.version>3.2.1</commons-collections.version>
+ <commons-collections.version>3.2.2</commons-collections.version>
<commons-fileupload.version>1.2.2</commons-fileupload.version>
<commons-io.version>2.4</commons-io.version>
<commons-lang.version>2.6</commons-lang.version>
@@ -171,7 +171,7 @@
<dependency>
<groupId>xerces</groupId>
<artifactId>xercesImpl</artifactId>
- <version>2.11.0</version>
+ <version>2.12.2</version>
</dependency>
<dependency>
