[
https://issues.apache.org/jira/browse/TENTACLES-19?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Philipp Ottlinger resolved TENTACLES-19.
----------------------------------------
Resolution: Fixed
done.
> Get rid of old velocity version and gain the ability to update to the latest
> ASF parent pom
> -------------------------------------------------------------------------------------------
>
> Key: TENTACLES-19
> URL: https://issues.apache.org/jira/browse/TENTACLES-19
> Project: Apache Tentacles
> Issue Type: Improvement
> Reporter: Philipp Ottlinger
> Assignee: Philipp Ottlinger
> Priority: Major
> Fix For: 0.2
>
>
> Tentacles uses an older velocity within itself, that contains a security
> issue CVE-2020-13936 / GHSA Id: GHSA-59j4-wjwp-mw9m
> https://github.com/advisories/GHSA-59j4-wjwp-mw9m
> This version uses commons-lang v2.x, which causes an issue while updating to
> the latest ASF v32 parent pom, as it introduces commons-lang3 by default,
> which results in an build error:
> Caused by: org.apache.maven.plugin.PluginContainerException: A required class
> was missing while executing
> org.apache.maven.plugins:maven-jar-plugin:3.4.0:jar:
> org/apache/commons/io/file/attribute/FileTimes
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
