[
https://issues.apache.org/jira/browse/TOBAGO-1730?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15957582#comment-15957582
]
Hudson commented on TOBAGO-1730:
--------------------------------
SUCCESS: Integrated in Jenkins build Tobago 3.0.x #8 (See
[https://builds.apache.org/job/Tobago%203.0.x/8/])
Merged from trunk
TOBAGO-1730: Update dependencies with respect to CVE [from revision 1790315]
(lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1790316])
* (edit) tobago-3.0.x
* (edit) tobago-3.0.x/tobago-example/tobago-example-addressbook/pom.xml
Merged from trunk
TOBAGO-1730: Update dependencies with respect to CVE [from revision 1790312]
(lofwyr: [http://svn.apache.org/viewvc/?view=rev&rev=1790314])
* (edit) tobago-3.0.x
* (edit) tobago-3.0.x/pom.xml
> Update dependencies with respect to CVE
> ---------------------------------------
>
> Key: TOBAGO-1730
> URL: https://issues.apache.org/jira/browse/TOBAGO-1730
> Project: MyFaces Tobago
> Issue Type: Task
> Components: Build
> Reporter: Udo Schnurpfeil
> Assignee: Udo Schnurpfeil
> Priority: Trivial
> Fix For: 3.0.4, 3.1.0
>
>
> * Using portlet api from apache instead of javax, because of parsing error of
> the pom.xml (contains unknown entity reference
> * update logback because of CVE-2017-5929
> * update openjpa, because of asm dependency (only old addressbook)
--
This message was sent by Atlassian JIRA
(v6.3.15#6346)
