Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Updated Xerces to 2.12.2 #1156

Merged
merged 1 commit into from
Jan 27, 2022
Merged

Conversation

AlexXuChen
Copy link
Contributor

Updated Xerces to 2.12.2 due to <2.12.1 vulnerability: https://www.eclipse.org/lists/cross-project-issues-dev/msg18920.html

Signed-off-by: Alexander Chen [email protected]

@rgrunber
Copy link
Contributor

👍 , when 2.12.2 is deployed, this will resolve and we can merge.

@fbricon
Copy link
Contributor

fbricon commented Jan 27, 2022

@apupier is looking into getting xerces 2.12.2 published to Maven Central

@fbricon fbricon added bug Something isn't working dependencies Pull requests that update a dependency file labels Jan 27, 2022
@apupier
Copy link
Contributor

apupier commented Jan 27, 2022

published https://repo1.maven.org/maven2/xerces/xercesImpl/2.12.2/

Signed-off-by: Alexander Chen <[email protected]>
@rgrunber
Copy link
Contributor

LGTM @fbricon / @angelozerr feel free to merge this.

@fbricon fbricon merged commit 1159498 into eclipse-lemminx:master Jan 27, 2022
@fbricon fbricon added this to the 0.18.3 milestone Jan 27, 2022
@AlexXuChen AlexXuChen deleted the xerces-2.12.2 branch January 27, 2022 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants