[jira] [Commented] (CONNECTORS-1714) upgrade commons-beanutils due to CVE

2022-06-09 Thread Karl Wright (Jira)


[ 
https://issues.apache.org/jira/browse/CONNECTORS-1714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552132#comment-17552132
 ] 

Karl Wright commented on CONNECTORS-1714:
-

r1901777


> upgrade commons-beanutils due to CVE
> 
>
> Key: CONNECTORS-1714
> URL: https://issues.apache.org/jira/browse/CONNECTORS-1714
> Project: ManifoldCF
>  Issue Type: Bug
>Reporter: PJ Fanning
>Assignee: Karl Wright
>Priority: Major
>
> https://github.com/advisories/GHSA-6phf-73q6-gh87
> https://github.com/apache/manifoldcf/blob/trunk/connectors/alfresco/pom.xml 
> -- upgrade beanutils to v1.9.4



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (CONNECTORS-1714) upgrade commons-beanutils due to CVE

2022-06-09 Thread Karl Wright (Jira)


[ 
https://issues.apache.org/jira/browse/CONNECTORS-1714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552084#comment-17552084
 ] 

Karl Wright commented on CONNECTORS-1714:
-

[~pj.fanning], I did not configure or set up the Travis build and it seems like 
it was broken before you started.  But I did look at the patch and it doesn't 
look to me like it's complete.  I have a busy workday today so I won't be able 
to spend hours on this but I do need to point out that the Maven build for MCF 
is secondary, not primary, so you first want to make sure that the ant build is 
correct in any case.

Thanks!


> upgrade commons-beanutils due to CVE
> 
>
> Key: CONNECTORS-1714
> URL: https://issues.apache.org/jira/browse/CONNECTORS-1714
> Project: ManifoldCF
>  Issue Type: Bug
>Reporter: PJ Fanning
>Assignee: Karl Wright
>Priority: Major
>
> https://github.com/advisories/GHSA-6phf-73q6-gh87
> https://github.com/apache/manifoldcf/blob/trunk/connectors/alfresco/pom.xml 
> -- upgrade beanutils to v1.9.4



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (CONNECTORS-1714) upgrade commons-beanutils due to CVE

2022-06-09 Thread PJ Fanning (Jira)


[ 
https://issues.apache.org/jira/browse/CONNECTORS-1714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552068#comment-17552068
 ] 

PJ Fanning commented on CONNECTORS-1714:


[~kwri...@metacarta.com] https://github.com/apache/manifoldcf/pull/120 - build 
is failing but I'm not sure if the build is failing due to the PR change or if 
it the issue is unrelated

> upgrade commons-beanutils due to CVE
> 
>
> Key: CONNECTORS-1714
> URL: https://issues.apache.org/jira/browse/CONNECTORS-1714
> Project: ManifoldCF
>  Issue Type: Bug
>Reporter: PJ Fanning
>Assignee: Karl Wright
>Priority: Major
>
> https://github.com/advisories/GHSA-6phf-73q6-gh87
> https://github.com/apache/manifoldcf/blob/trunk/connectors/alfresco/pom.xml 
> -- upgrade beanutils to v1.9.4



--
This message was sent by Atlassian Jira
(v8.20.7#820007)


[jira] [Commented] (CONNECTORS-1714) upgrade commons-beanutils due to CVE

2022-06-09 Thread Karl Wright (Jira)


[ 
https://issues.apache.org/jira/browse/CONNECTORS-1714?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17552060#comment-17552060
 ] 

Karl Wright commented on CONNECTORS-1714:
-

Please propose a patch.
Thanks.


> upgrade commons-beanutils due to CVE
> 
>
> Key: CONNECTORS-1714
> URL: https://issues.apache.org/jira/browse/CONNECTORS-1714
> Project: ManifoldCF
>  Issue Type: Bug
>Reporter: PJ Fanning
>Assignee: Karl Wright
>Priority: Major
>
> https://github.com/advisories/GHSA-6phf-73q6-gh87
> https://github.com/apache/manifoldcf/blob/trunk/connectors/alfresco/pom.xml 
> -- upgrade beanutils to v1.9.4



--
This message was sent by Atlassian Jira
(v8.20.7#820007)