Michael Ahern created XERCESJ-1696:
--------------------------------------
Summary: XercesImpl 2.12.0 is not available on maven central
Key: XERCESJ-1696
URL: https://issues.apache.org/jira/browse/XERCESJ-1696
Project: Xerces2-J
Issue Type: Bug
Affects Versions: 2.12.0
Reporter: Michael Ahern
The xercesImpl version 2.12 jar is not. This version is needed to gain access
to the latest Xerces security fixes (e.g.
[https://nvd.nist.gov/vuln/detail/CVE-2012-0881).]
A number of open source projects are using insecure Xerces versions due to the
lack of an up-to-date XercesImpl.jar in the maven central repository.
https://mvnrepository.com/artifact/xerces/xercesImpl
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
