Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.
Sign upSEC-2732: Update net.sf.ehcache:ehcache-core dependencies to use net.sf.ehcache:ehcache instead #2957
Comments
This comment has been minimized.
This comment has been minimized.
Rob Winch said: This is resolved in master. I did not put the change into 3.2.x since the latest 1.0.x spring io version did not contain ehcache dependency. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Andy Wilkinson (Migrated from SEC-2732) said:
The ehcache team have indicated that they consider ehcache-core to be an internal artifact (this is shown by its move to the net.sf.ehcache.internal group in 2.7.0 and later). Rather than depending on it directly, we should be using a dependency on net.sf.ehcache:ehcache instead.
This change will allow Spring IO Platform to remove its dependency management for ehcache-core.