Hi, Time to cut a release of the (still deprecated) commons.json module. We only include the already-known CVE fix, cut from the maintenance branch.
We solved 1 issues in this release: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310710&version= 12354425&styleName=Text Staging repository: https://repository.apache.org/content/repositories/orgapachesling-2842 You can use this UNIX script to download the release and verify the signatures: https://raw.githubusercontent.com/apache/sling-tooling-release/master/check_staged_release.sh Usage: sh check_staged_release.sh 2842 /tmp/sling-staging Please vote to approve this release: [ ] +1 Approve the release [ ] 0 Don't care [ ] -1 Don't release, because ... This majority vote is open for at least 72 hours.