[
https://issues.apache.org/jira/browse/MINDEXER-120?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17965324#comment-17965324
] Olivier Lamy commented on MINDEXER-120: --------------------------------------- This project has moved from Jira to GitHub Issues. This issue was migrated to [apache/maven-indexer#516|https://github.com/apache/maven-indexer/issues/516]. > Remove TrueZip dependency > ------------------------- > > Key: MINDEXER-120 > URL: https://issues.apache.org/jira/browse/MINDEXER-120 > Project: Maven Indexer (Moved to GitHub Issues) > Issue Type: Improvement > Reporter: Sylwester Lachiewicz > Assignee: Sylwester Lachiewicz > Priority: Major > Fix For: 6.1.0, 6.1.1 > > > Starting from Java 7 b55 > [4681995|https://bugs.java.com/bugdatabase/view_bug.do?bug_id=4681995] we > have support for big zip files (ZIP64) in core java. > Removing TrueZip would also remove dependency to potentially vulnerable > dependencies org.bouncycastle:bcprov-jdk15on and > org.apache.commons:commons-compress > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32368] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32366] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32361] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32362] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32340] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32364] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-32473] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGAPACHECOMMONS-72275] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32367] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32363] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-173771] > [https://app.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-32365] > > Credits to: [https://snyk.io/] -- This message was sent by Atlassian Jira (v8.20.10#820010)
