https://bugs.documentfoundation.org/show_bug.cgi?id=147334
Julien Nabet <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected], | |[email protected] --- Comment #1 from Julien Nabet <[email protected]> --- Stephan: taking a look at configure.ac, I noticed "NEED_ANT" var which takes the value TRUE to build Hsqldb, Jfreereport or Rhino if they're not provided by system. I also noticed ant_minver=1.6.0 (line 13599) but even we force the use of last known version 1.10.12, there are still CVEs, see https://mvnrepository.com/artifact/org.apache.ant/ant-apache-log4j/1.10.12 Any thoughts here? -- You are receiving this mail because: You are the assignee for the bug.
