[
https://issues.apache.org/jira/browse/GROOVY-10814?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17652256#comment-17652256
]
Eric Milles commented on GROOVY-10814:
--------------------------------------
It would seem that Ivy 2.5.1 is not compatible with Java 7. Is this a concern
for Groovy 2.5 or should the Java 7 build be retired?
> Bump ivy to 2.5.1
> -----------------
>
> Key: GROOVY-10814
> URL: https://issues.apache.org/jira/browse/GROOVY-10814
> Project: Groovy
> Issue Type: Dependency upgrade
> Reporter: Daniel Sun
> Assignee: Daniel Sun
> Priority: Major
> Fix For: 3.0.14, 2.5.20, 4.0.7
>
>
> This includes some security fixes from Ivy CVE-2022-37865 and CVE-2022-37866
> as per:
> [https://ant.apache.org/ivy/security.html]
> Groovy uses Ivy in its Grape/Grab component. While that functionality isn't
> impacted by those security issues, any users who might be using the Ivy jar
> directly should update to Ivy 2.5.1 if they haven't done so already.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
