Compare commits

...

1 Commits

Author SHA1 Message Date
jzhao
ab29cb303f fix(TDI-41506):High CVE Vulnerability found in Talend Components (#3119)
* upgrade commons-fileupload from 1.0 to 1.3.1
* upgrade xalan/serializer from 2.7.1 to 2.7.2
* remove serializer-2.7.1
2019-03-04 15:40:45 +08:00
4 changed files with 6 additions and 8 deletions

View File

@@ -144,8 +144,7 @@
REQUIRED_IF="GENERATION_MODE == 'DOM4J'" />
<IMPORT NAME="Java_xercesImpl" MODULE="xercesImpl.jar" MVN="mvn:org.talend.libraries/xercesImpl/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.apache.xml/lib/xercesImpl.jar"
REQUIRED_IF="(GENERATION_MODE == 'XERCES') OR (GENERATION_MODE == 'SAX')" BundleID="" />
<IMPORT NAME="Java_xalan" MODULE="xalan.jar" MVN="mvn:org.talend.libraries/xalan/6.0.0" UrlPath="platform:/base/plugins/org.apache.xalan_2.7.1.v201005080400.jar"
REQUIRED_IF="GENERATION_MODE == 'XERCES'" BundleID="" />
<IMPORT NAME="Java_xalan" MODULE="xalan-2.7.2.jar" MVN="mvn:xalan/xalan/2.7.2" REQUIRED_IF="GENERATION_MODE == 'XERCES'" BundleID="" />
<IMPORT NAME="Java_talendSAX" MODULE="TalendSAX.jar" MVN="mvn:org.talend.libraries/TalendSAX/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.xml/lib/TalendSAX.jar"
REQUIRED_IF="GENERATION_MODE == 'SAX'" />
<IMPORT NAME="xpathutil" MODULE="xpathutil-1.0.0.jar" MVN="mvn:org.talend.libraries/xpathutil-1.0.0/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.xml/lib/xpathutil-1.0.0.jar"

View File

@@ -326,7 +326,7 @@
<IMPORT NAME="commons-log" MODULE="commons-logging-1.1.jar" MVN="mvn:org.talend.libraries/commons-logging-1.1/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.apache.common/lib/commons-logging-1.1.jar" REQUIRED="true" />
<IMPORT NAME="commons-beanutils" MODULE="commons-beanutils-1.7.jar" MVN="mvn:org.talend.libraries/commons-beanutils-1.7/6.0.0" UrlPath="platform:/base/plugins/org.apache.commons.beanutils_1.7.0.v200902170505.jar" REQUIRED="true" />
<IMPORT NAME="commons-colections" MODULE="commons-collections-3.2.2.jar" MVN="mvn:commons-collections/commons-collections/3.2.2" UrlPath="platform:/plugin/org.talend.libraries.apache.common/lib/commons-collections-3.2.2.jar" REQUIRED="true" BundleID="" />
<IMPORT NAME="commons-fileupload" MODULE="commons-fileupload-1.0.jar" MVN="mvn:org.talend.libraries/commons-fileupload-1.0/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.apache.common/lib/commons-fileupload-1.0.jar" REQUIRED="true" />
<IMPORT NAME="commons-fileupload" MODULE="commons-fileupload-1.3.1.jar" MVN="mvn:org.talend.libraries/commons-fileupload-1.3.1/6.0.0" REQUIRED="true" />
<IMPORT NAME="commons-pool" MODULE="commons-pool-1.2.jar" MVN="mvn:org.talend.libraries/commons-pool-1.2/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.apache.common/lib/commons-pool-1.2.jar" REQUIRED="true" />
<IMPORT NAME="commons-digester" MODULE="commons-digester-1.7.jar" MVN="mvn:org.talend.libraries/commons-digester-1.7/6.0.0" UrlPath="platform:/plugin/org.talend.libraries.apache.common/lib/commons-digester-1.7.jar" REQUIRED="true" />
<IMPORT NAME="commons-httpclient" MODULE="commons-httpclient-3.0.1.jar" MVN="mvn:commons-httpclient/commons-httpclient/3.0.1" UrlPath="platform:/plugin/org.talend.libraries.apache.http/lib/commons-httpclient-3.0.1.jar" REQUIRED="true" />

View File

@@ -347,15 +347,14 @@
<IMPORT
NAME="xalan"
MODULE="xalan-2.7.1.jar"
MVN="mvn:org.talend.libraries/xalan-2.7.1/6.0.0"
UrlPath="platform:/base/plugins/org.apache.xalan_2.7.1.v201005080400.jar"
MODULE="xalan-2.7.2.jar"
MVN="mvn:xalan/xalan/2.7.2"
REQUIRED="true"
/>
<IMPORT
NAME="serializer"
MODULE="serializer-2.7.1.jar"
MVN="mvn:xalan/serializer/2.7.1"
MODULE="serializer-2.7.2.jar"
MVN="mvn:xalan/serializer/2.7.2"
REQUIRED="true"
/>