[NXP-32148] Upgrade mina-core to 2.0.21 / 2.1.1 - Nuxeo Issue Tracker

XML

Word

Printable

Tags:
- SupCom
- noRNS
- nxplatform
Backlog priority:
900
Upgrade notes:
Hide

The following dependency has been removed:

org.apache.directory.server:apacheds-kerberos-shared:1.5.1

Thus, also removing its transitive dependency:

org.apache.mina:mina-core:1.1.2

Note that apacheds-kerberos-shared was previously made available as a transitive dependency of:

org.apache.directory.server:apacheds-core:1.5.1
Show
The following dependency has been removed: org.apache.directory.server:apacheds-kerberos-shared:1.5.1 Thus, also removing its transitive dependency: org.apache.mina:mina-core:1.1.2 Note that apacheds-kerberos-shared was previously made available as a transitive dependency of: org.apache.directory.server:apacheds-core:1.5.1
Sprint:
nxplatform #101
Story Points:
2

In order to fix CVE-2019-0231 we need to migrate mina-core to 2.0.21 or 2.1.1

Note that this dependency was removed by ~~NXP-31786~~ in LTS 2023

is related to

NXP-31786 Upgrade mina-core to 2.1.5