Uploaded image for project: 'jclouds'
  1. jclouds
  2. JCLOUDS-1525

Update xmlbuilder dependency

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 2.3.0
    • None
    • None

    Description

      The xmlbuilder dependency needs to be updated due to a security issue:

      java-xmlbuilder-1.1.jar (pkg:maven/com.jamesmurty.utils/java-xmlbuilder@1.1) : CWE-611: Improper Restriction of XML External Entity Reference ('XXE')

       

      Attachments

        Issue Links

          is related to

          Task - A task that needs to be done. OAK-8841 blob-*: update jclouds dependency and avoid indirect dependency to java-xmlbuilder 1.1

          • Major - Major loss of function.
          • Open
          links to

          Web Link GitHub Pull Request #52

          Activity

            People

              Unassigned Unassigned
              coheigea Colm O hEigeartaigh
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 0.5h
                  0.5h