This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch DOXIA-604 in repository https://gitbox.apache.org/repos/asf/maven-doxia.git
commit faabbe76c1b304b6f6727810a6feba5c7ad437f4 Author: Sylwester Lachiewicz <slachiew...@apache.org> AuthorDate: Thu Feb 6 22:40:13 2020 +0100 [DOXIA-604] Upgrade to FOP 2.4 --- doxia-modules/doxia-module-fo/pom.xml | 2 +- pom.xml | 8 -------- 2 files changed, 1 insertion(+), 9 deletions(-) diff --git a/doxia-modules/doxia-module-fo/pom.xml b/doxia-modules/doxia-module-fo/pom.xml index e1a2f8e..d9059d2 100644 --- a/doxia-modules/doxia-module-fo/pom.xml +++ b/doxia-modules/doxia-module-fo/pom.xml @@ -85,7 +85,7 @@ under the License. <dependency> <groupId>org.apache.xmlgraphics</groupId> <artifactId>fop</artifactId> - <version>2.3</version> + <version>2.4</version> </dependency> <dependency> <groupId>log4j</groupId> diff --git a/pom.xml b/pom.xml index 5c4a483..b31764f 100644 --- a/pom.xml +++ b/pom.xml @@ -202,14 +202,6 @@ under the License. <artifactId>plexus-component-annotations</artifactId> <version>1.7.1</version> </dependency> - - <dependency><!-- remove when upgrade fop to higher than 2.3 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8036 --> - <groupId>org.apache.pdfbox</groupId> - <artifactId>fontbox</artifactId> - <version>2.0.12</version> - </dependency> - <dependency> <groupId>org.codehaus.plexus</groupId> <artifactId>plexus-utils</artifactId>