[
https://issues.apache.org/jira/browse/PDFBOX-3865?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16088534#comment-16088534
]
ASF subversion and git services commented on PDFBOX-3865:
---------------------------------------------------------
Commit 1802017 from [~tilman] in branch 'pdfbox/branches/1.8'
[ https://svn.apache.org/r1802017 ]
PDFBOX-3865: update version
> Add OWASP dependency-check to build
> -----------------------------------
>
> Key: PDFBOX-3865
> URL: https://issues.apache.org/jira/browse/PDFBOX-3865
> Project: PDFBox
> Issue Type: Task
> Affects Versions: 1.8.13, 2.0.6, 3.0.0
> Reporter: Tilman Hausherr
> Assignee: Tilman Hausherr
> Labels: build, maven
> Fix For: 1.8.14, 2.0.7, 3.0.0
>
>
> https://github.com/jeremylong/dependency-check-gradle#current-release
> checks the build against known security issues. I tried it with a project
> that linked pdfbox 2.0.0 (has XXE vulnerability) and yes, the build stopped.
> Because the database needs 400MB in the repository we'll run it only in
> "pedantic" mode, i.e. for the jenkins builds.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
