I was advised to solicit opinions regarding the change introduced as a fix
for the abovementioned issue. It concerns how an event that has both a
message and an exception is logged.
Namely, a stack trace of the exception is logged (in debug mode only)
without any separator from the preceding
On 2018-06-08, Gintautas Grigelionis wrote:
> Then I was surprised that Dependency Check indicates that the latest
> XZ 1.8 has a vulnerability: should we ask them to investigate?
That's a false positive.
https://www.cvedetails.com/cve/CVE-2015-4035/ applies to the command
line tooling and is
I took the liberty to sync QA tools among Ant, Ivy and IvyDE.
A couple of notes: Ant 1.10 having a Java 8 baseline permits migration
from FindBugs to SpotBugs; I decided to it now rather than wait for
dependency issues [1] to be resolved. Then I was surprised that
Dependency Check indicates that
