[MINDEXER-120] Remove TrueZip dependency - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: None
Fix Version/s: 6.1.0, 6.1.1
Labels:
None

Description

Starting from Java 7 b55 4681995 we have support for big zip files (ZIP64) in core java.

Removing TrueZip would also remove dependency to potentially vulnerable dependencies org.bouncycastle:bcprov-jdk15on and org.apache.commons:commons-compress

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32368

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32366

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32361

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32362

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32340

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32364

https://app.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-32473

https://app.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-72275

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32367

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32363

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-173771

https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32365

Credits to: https://snyk.io/

Attachments

Activity

People

Assignee:: Sylwester Lachiewicz

Reporter:: Sylwester Lachiewicz

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 29/Jul/19 23:21

Updated:: 13/Feb/22 08:19

Resolved:: 05/Feb/20 22:49