[PRODSEC-8959] fix for zt-zip vulnerability

fix for alfresco security issues (#667 )
[PRODSEC-9051] updated plexus archiver version from 3.4 to 4.9.2 (#666 )
2026-09-16 18:13:23 +00:00 · 2024-06-06 16:52:23 +05:30 · 2024-05-31 15:41:28 +05:30 · 2024-05-28 12:40:18 +05:30 · 2024-05-27 15:14:03 +05:30 · 2024-05-22 14:41:47 +05:30
1 changed files with 8 additions and 3 deletions
@@ -92,7 +92,7 @@
        <dependency>
            <groupId>org.codehaus.plexus</groupId>
            <artifactId>plexus-archiver</artifactId>
-            <version>3.4</version>
+            <version>4.9.2</version>
        </dependency>
        <dependency>
            <groupId>org.apache.maven</groupId>
@@ -127,7 +127,12 @@
        <dependency>
            <groupId>org.alfrescolabs.alfresco-technical-validation</groupId>
            <artifactId>org.alfrescolabs.alfresco-technical-validation</artifactId>
-            <version>0.4.0</version>
+            <version>0.6.0</version>
+        </dependency>
+        <dependency>
+            <groupId>commons-lang</groupId>
+            <artifactId>commons-lang</artifactId>
+            <version>2.6</version>
        </dependency>
        <dependency>
            <groupId>org.twdata.maven</groupId>
@@ -138,7 +143,7 @@
        <dependency>
            <groupId>org.zeroturnaround</groupId>
            <artifactId>zt-zip</artifactId>
-            <version>1.11</version>
+            <version>1.17</version>
        </dependency>
        <dependency>
            <groupId>de.schlichtherle.truezip</groupId>
Author	SHA1	Message	Date
pmm	f7585a1d18	[PRODSEC-8959] fix for zt-zip vulnerability	2024-06-06 16:52:23 +05:30
purusothaman-mm	2c29c915d4	fix for alfresco security issues (#667 )	2024-05-31 15:41:28 +05:30
Manish Kumar	7878155ed9	[PRODSEC-9051] updated plexus archiver version from 3.4 to 4.9.2 (#666 )	2024-05-28 12:40:18 +05:30
pmm	7aa6400210	Revert "[PRODSEC-9046] fix for sdk vulnerability (#665 )" This reverts commit `cc0955e012`.	2024-05-27 15:14:03 +05:30
purusothaman-mm	cc0955e012	[PRODSEC-9046] fix for sdk vulnerability (#665 )	2024-05-22 14:41:47 +05:30