Handle CVE-2018-10237 after updates.

AyoyAB · Dec 5, 2020 · ccd4e7d · ccd4e7d
1 parent 57b4a2c
commit ccd4e7d
Show file tree

Hide file tree

Showing 2 changed files with 19 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -109,6 +109,18 @@
             <artifactId>plexus-utils</artifactId>
             <version>3.2.0</version>
         </dependency>
+        <dependency>
+            <!-- CVE-2018-10237 -->
+            <!--
+              Dependency of
+              org.apache.maven:maven-core:jar:3.2.5
+              -> org.sonatype.sisu:sisu-guice:jar:no_aop:3.2.3
+                 -> com.google.guava:guava:jar:16.0.1
+            -->
+            <groupId>com.google.guava</groupId>
+            <artifactId>guava</artifactId>
+            <version>24.1.1-jre</version>
+        </dependency>
 
         <!-- dependencies for unit test -->
         <dependency>

diff --git a/src/licenses/licenses.xml b/src/licenses/licenses.xml
@@ -50,13 +50,20 @@
                 <url>http://www.gnu.org/licenses/lgpl.txt</url>
             </urls>
         </license>
+        <license>
+            <name>GNU General Public License, version 2 (GPL2), with the classpath exception</name>
+            <urls>
+                <url>http://www.gnu.org/software/classpath/license.html</url>
+            </urls>
+        </license>
         <license>
             <name>The MIT License</name>
             <names>
                 <name>The MIT License</name>
             </names>
             <urls>
                 <url>http://code.google.com/p/mockito/wiki/License</url>
+                <url>http://www.opensource.org/licenses/mit-license.php</url>
             </urls>
         </license>
         <license>