Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Duplicate
-
2.12.0
-
None
-
None
-
None
Description
The xercesImpl version 2.12 jar is not. This version is needed to gain access to the latest Xerces security fixes (e.g. https://nvd.nist.gov/vuln/detail/CVE-2012-0881).
A number of open source projects are using insecure Xerces versions due to the lack of an up-to-date XercesImpl.jar in the maven central repository.
Attachments
Issue Links
- duplicates
-
XERCESJ-1695 Xerces2J v 2.12 not available on Maven Central
- Open
- is a clone of
-
XERCESJ-1696 XercesImpl 2.12.0 is not available on maven central
- Closed