[jira] [Comment Edited] (FELIX-6230) Vulnerable dependencies in your project.(CVEs)

2020-03-03 Thread Carsten Ziegeler (Jira)
[ https://issues.apache.org/jira/browse/FELIX-6230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17050959#comment-17050959 ] Carsten Ziegeler edited comment on FELIX-6230 at 3/4/20, 7:56 AM: --

[jira] [Commented] (FELIX-6230) Vulnerable dependencies in your project.(CVEs)

2020-03-03 Thread Carsten Ziegeler (Jira)
[ https://issues.apache.org/jira/browse/FELIX-6230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17050959#comment-17050959 ] Carsten Ziegeler commented on FELIX-6230: - Thanks for reporting this - please note that in most

[GitHub] [felix-atomos] tjwatson merged pull request #4: Allow public access to ConnectContent via the AtomosContent interface

2020-03-03 Thread GitBox
tjwatson merged pull request #4: Allow public access to ConnectContent via the AtomosContent interface URL: https://github.com/apache/felix-atomos/pull/4 This is an automated message from the Apache Git Service. To respond

[GitHub] [felix-atomos] sebratton opened a new pull request #4: Allow public access to ConnectContent via the AtomosContent interface

2020-03-03 Thread GitBox
sebratton opened a new pull request #4: Allow public access to ConnectContent via the AtomosContent interface URL: https://github.com/apache/felix-atomos/pull/4 This is an automated message from the Apache Git Service. To

[GitHub] [felix-atomos] tjwatson commented on issue #1: WIP: FELIX-6228: Atomos maven plugin

2020-03-03 Thread GitBox
tjwatson commented on issue #1: WIP: FELIX-6228: Atomos maven plugin URL: https://github.com/apache/felix-atomos/pull/1#issuecomment-594123632 This is looking great so far. To get the web console to work I had to patch the `additionalResourceConfig.json` file. This is because the

[jira] [Resolved] (FELIX-6197) Felix & OSGi Presentations download links are broken

2020-03-03 Thread Karl Pauls (Jira)
[ https://issues.apache.org/jira/browse/FELIX-6197?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Karl Pauls resolved FELIX-6197. --- Assignee: Karl Pauls Resolution: Fixed Thanks. I deleted that page as it was outdated anyways.

[GitHub] [felix-dev] jsedding commented on a change in pull request #1: FELIX-6232 - adding option to install parallel version of bundle

2020-03-03 Thread GitBox
jsedding commented on a change in pull request #1: FELIX-6232 - adding option to install parallel version of bundle URL: https://github.com/apache/felix-dev/pull/1#discussion_r387001151 ## File path:

[GitHub] [felix-dev] coheigea opened a new pull request #8: FELIX-6193 - Update maven-archiver + plexus-utils

2020-03-03 Thread GitBox
coheigea opened a new pull request #8: FELIX-6193 - Update maven-archiver + plexus-utils URL: https://github.com/apache/felix-dev/pull/8 We should update the versions of maven-archiver + plexus-utils in the maven-bundle-plugin to remove the CVEs: plexus-archiver-2.8.1.jar

[GitHub] [felix-dev] coheigea opened a new pull request #7: Updating pax url in a few places

2020-03-03 Thread GitBox
coheigea opened a new pull request #7: Updating pax url in a few places URL: https://github.com/apache/felix-dev/pull/7 This is an automated message from the Apache Git Service. To respond to the message, please log on to

[GitHub] [felix-dev] jbonofre commented on issue #5: FELIX-6189 - Make sure jar/zip files are jailed to the destination di…

2020-03-03 Thread GitBox
jbonofre commented on issue #5: FELIX-6189 - Make sure jar/zip files are jailed to the destination di… URL: https://github.com/apache/felix-dev/pull/5#issuecomment-593865505 Not sure it's a good idea. This kind of change already breaks Felix Utils. Let me do a pass and also reopen about

[GitHub] [felix-dev] jbonofre commented on issue #6: Updating Commons Compress, FileUpload and IO

2020-03-03 Thread GitBox
jbonofre commented on issue #6: Updating Commons Compress, FileUpload and IO URL: https://github.com/apache/felix-dev/pull/6#issuecomment-593864795 LGTM. However, let me do a complete build/use pass just in case. This is an

[GitHub] [felix-dev] coheigea opened a new pull request #6: Updating Commons Compress, FileUpload and IO

2020-03-03 Thread GitBox
coheigea opened a new pull request #6: Updating Commons Compress, FileUpload and IO URL: https://github.com/apache/felix-dev/pull/6 This is an automated message from the Apache Git Service. To respond to the message, please

[GitHub] [felix-dev] cziegeler commented on issue #3: Update some old sslfilter test dependencies

2020-03-03 Thread GitBox
cziegeler commented on issue #3: Update some old sslfilter test dependencies URL: https://github.com/apache/felix-dev/pull/3#issuecomment-593862462 Thanks for the PR This is an automated message from the Apache Git Service.

[GitHub] [felix-dev] cziegeler merged pull request #3: Update some old sslfilter test dependencies

2020-03-03 Thread GitBox
cziegeler merged pull request #3: Update some old sslfilter test dependencies URL: https://github.com/apache/felix-dev/pull/3 This is an automated message from the Apache Git Service. To respond to the message, please log on

[GitHub] [felix-dev] coheigea opened a new pull request #5: FELIX-6189 - Make sure jar/zip files are jailed to the destination di…

2020-03-03 Thread GitBox
coheigea opened a new pull request #5: FELIX-6189 - Make sure jar/zip files are jailed to the destination di… URL: https://github.com/apache/felix-dev/pull/5 …rectory This is an automated message from the Apache Git Service.

[jira] [Work logged] (FELIX-6235) Disallow DTDs when reading OBR repository files

2020-03-03 Thread ASF GitHub Bot (Jira)
[ https://issues.apache.org/jira/browse/FELIX-6235?focusedWorklogId=396685=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-396685 ] ASF GitHub Bot logged work on FELIX-6235: - Author: ASF GitHub Bot