[ 
https://issues.apache.org/jira/browse/CONFIGURATION-823?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17627207#comment-17627207
 ] 

Gary D. Gregory commented on CONFIGURATION-823:
-----------------------------------------------

As I already explained in the GitHub PR:

Apache Commons Text 1.10.0 is already released, you can use it from you 
applications. There is no schedule as of yet for the next release of Commons 
Configuration. We do not create a release just to update a dependency since an 
app can do that on it's own. Note that we are volunteering our time.

> Update Apache Commons Text from 1.9 to 1.10.0
> ---------------------------------------------
>
>                 Key: CONFIGURATION-823
>                 URL: https://issues.apache.org/jira/browse/CONFIGURATION-823
>             Project: Commons Configuration
>          Issue Type: Improvement
>    Affects Versions: 2.8.0
>            Reporter: MOREAU
>            Priority: Critical
>             Fix For: 2.9.0
>
>
> There is a GHSL-2022-018 / CVE-2022-42889



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to