Re: maven file management uses vulnerable commons-io

2024-10-29 Thread Slawomir Jaranowski
It is still used: https://github.com/search?q=file-management+language%3A%22Maven+POM%22&type=code even in apache projects: https://github.com/search?q=file-management+language%3A%22Maven+POM%22+org%3Aapache&type=code On Mon, 28 Oct 2024 at 22:31, Tamás Cservenák wrote: > > Sorry for the noise,

Re: maven file management uses vulnerable commons-io

2024-10-28 Thread Derek Cordeiro
nt: Tuesday, October 29, 2024 3:00 AM > To: Maven Users List > Subject: Re: maven file management uses vulnerable commons-io > > Sorry for the noise, but isn't file-management deprecated? > We just don't want yet-another-burden to maintain... > > Derek, what do you use

Re: maven file management uses vulnerable commons-io

2024-10-28 Thread Olivier Lamy
en Users List > Subject: Re: maven file management uses vulnerable commons-io > > Sorry for the noise, but isn't file-management deprecated? > We just don't want yet-another-burden to maintain... > > Derek, what do you use from file-management? > > Thanks > T >

Re: maven file management uses vulnerable commons-io

2024-10-28 Thread Derek Cordeiro
Maven Users List Subject: Re: maven file management uses vulnerable commons-io Sorry for the noise, but isn't file-management deprecated? We just don't want yet-another-burden to maintain... Derek, what do you use from file-management? Thanks T On Mon, Oct 28, 2024 at 9:46 PM Slawomir Ja

Re: maven file management uses vulnerable commons-io

2024-10-28 Thread Tamás Cservenák
Sorry for the noise, but isn't file-management deprecated? We just don't want yet-another-burden to maintain... Derek, what do you use from file-management? Thanks T On Mon, Oct 28, 2024 at 9:46 PM Slawomir Jaranowski wrote: > > Hi, > > Thanks for the info. > > I have added to my release queue.

Re: maven file management uses vulnerable commons-io

2024-10-28 Thread Slawomir Jaranowski
Hi, Thanks for the info. I have added to my release queue. I will release it in my free time. On Mon, 28 Oct 2024 at 18:16, Derek Cordeiro wrote: > > Hello, > > We use jacoco that uses maven file management 3.1.0 > (https://mvnrepository.com/artifact/org.apache.maven.shared/file-management/3.1

maven file management uses vulnerable commons-io

2024-10-28 Thread Derek Cordeiro
Hello, We use jacoco that uses maven file management 3.1.0 (https://mvnrepository.com/artifact/org.apache.maven.shared/file-management/3.1.0) and got a report that it is using a vulnerable version of commons-io. I see that the current branch in github already has a much newer version of common