[jira] [Created] (MNG-7100) Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core

2021-02-17 Thread Tomasz Zasada (Jira)
Tomasz Zasada created MNG-7100:
--

 Summary: Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 
in maven-core
 Key: MNG-7100
 URL: https://issues.apache.org/jira/browse/MNG-7100
 Project: Maven
  Issue Type: Bug
Affects Versions: 3.6.3
Reporter: Tomasz Zasada


maven-shared-utils 3.2.1 has known vulnerabilities: 
[https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMAVENSHARED-570592.]
Please upgrade maven-core to use 3.3.3 version of maven-shared-utils



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Updated] (MNG-7100) Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core

2021-02-17 Thread Tomasz Zasada (Jira)


 [ 
https://issues.apache.org/jira/browse/MNG-7100?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tomasz Zasada updated MNG-7100:
---
Issue Type: Dependency upgrade  (was: Bug)

> Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core
> ---
>
> Key: MNG-7100
> URL: https://issues.apache.org/jira/browse/MNG-7100
> Project: Maven
>  Issue Type: Dependency upgrade
>Affects Versions: 3.6.3
>Reporter: Tomasz Zasada
>Priority: Major
>
> maven-shared-utils 3.2.1 has known vulnerabilities: 
> [https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMAVENSHARED-570592.]
> Please upgrade maven-core to use 3.3.3 version of maven-shared-utils



--
This message was sent by Atlassian Jira
(v8.3.4#803005)


[jira] [Commented] (MNG-7100) Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core

2021-02-18 Thread Tomasz Zasada (Jira)


[ 
https://issues.apache.org/jira/browse/MNG-7100?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17286358#comment-17286358
 ] 

Tomasz Zasada commented on MNG-7100:


It is: https://github.com/apache/maven/blob/maven-3.6.3/maven-core/pom.xml#L93

> Upgrade maven-shared-utils dependency from 3.2.1 -> 3.3.3 in maven-core
> ---
>
> Key: MNG-7100
> URL: https://issues.apache.org/jira/browse/MNG-7100
> Project: Maven
>  Issue Type: Dependency upgrade
>Affects Versions: 3.6.3
>Reporter: Tomasz Zasada
>Priority: Major
>
> maven-shared-utils 3.2.1 has known vulnerabilities: 
> [https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEMAVENSHARED-570592.]
> Please upgrade maven-core to use 3.3.3 version of maven-shared-utils



--
This message was sent by Atlassian Jira
(v8.3.4#803005)