[cxf-dosgi] branch master updated: Use HTTPS instead of HTTP to resolve dependencies

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[cxf-dosgi] branch master updated: Use HTTPS instead of HTTP to resolve dependencies

coheigea
Administrator
This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cxf-dosgi.git


The following commit(s) were added to refs/heads/master by this push:
     new e6c2ee7  Use HTTPS instead of HTTP to resolve dependencies
     new 59a8468  Merge pull request #7 from JLLeitschuh/fix/JLL/use_https_to_resolve_dependencies
e6c2ee7 is described below

commit e6c2ee7f24ee31b3217fb97bdc4306a012462ca9
Author: Jonathan Leitschuh <[hidden email]>
AuthorDate: Mon Feb 10 18:21:09 2020 -0500

    Use HTTPS instead of HTTP to resolve dependencies
   
    This fixes a security vulnerability in this project where the `pom.xml`
    files were configuring Maven to resolve dependencies over HTTP instead of
    HTTPS.
   
    Signed-off-by: Jonathan Leitschuh <[hidden email]>
---
 parent/pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/parent/pom.xml b/parent/pom.xml
index 5d29e93..cc8b46e 100644
--- a/parent/pom.xml
+++ b/parent/pom.xml
@@ -338,7 +338,7 @@
         <repository>
             <id>apache.snapshots</id>
             <name>Apache Maven Snapshot Repository</name>
-            <url>http://repository.apache.org/content/groups/snapshots/</url>
+            <url>https://repository.apache.org/content/groups/snapshots/</url>
             <releases>
                 <enabled>false</enabled>
             </releases>
@@ -352,7 +352,7 @@
         <pluginRepository>
             <id>apache.snapshots</id>
             <name>Apache Maven Snapshot Repository</name>
-            <url>http://repository.apache.org/content/groups/snapshots/</url>
+            <url>https://repository.apache.org/content/groups/snapshots/</url>
             <layout>default</layout>
             <snapshots>
                 <enabled>true</enabled>