[ https://issues.apache.org/jira/browse/COCOON-2367?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16774266#comment-16774266 ]
Alfred Nathaniel commented on COCOON-2367: ------------------------------------------ Committed fix to 2.1.13-dev. http://svn.apache.org/viewvc?view=revision&revision=1853788 > Update to xalan-2.7.2 and add serializer-2.7.2 > ---------------------------------------------- > > Key: COCOON-2367 > URL: https://issues.apache.org/jira/browse/COCOON-2367 > Project: Cocoon > Issue Type: Improvement > Components: * Cocoon Core > Affects Versions: 2.1.12 > Reporter: Alfred Nathaniel > Priority: Major > Fix For: 2.1.13 > > > Cocoon 2.1.12 uses xalan-2.7.1 which contains a security issue. Upgrade to > xalan-2.7.2 is straightforward. Only the spawned-off serializer-2.7.2 jar > must be added. -- This message was sent by Atlassian JIRA (v7.6.3#76005)