[
https://issues.apache.org/jira/browse/MASSEMBLY-913?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16848412#comment-16848412
]
Karl Heinz Marbaise commented on MASSEMBLY-913:
-----------------------------------------------
Done in
[088dff66dff1e2641b472a09b363b509701036a3|https://gitbox.apache.org/repos/asf?p=maven-assembly-plugin.git;a=commitdiff;h=088dff66dff1e2641b472a09b363b509701036a3]
> Upgrade commons-compress/commons-io for Maven Invoker Plugin
> ------------------------------------------------------------
>
> Key: MASSEMBLY-913
> URL: https://issues.apache.org/jira/browse/MASSEMBLY-913
> Project: Maven Assembly Plugin
> Issue Type: Dependency upgrade
> Affects Versions: 3.1.2
> Reporter: Karl Heinz Marbaise
> Assignee: Karl Heinz Marbaise
> Priority: Minor
> Fix For: 3.1.2
>
>
> This causes a [security issue
> hint|https://nvd.nist.gov/vuln/detail/CVE-2018-11771] in GitHub.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
