From d394659b4d7891299f894b01c26eb463fc2e6c7b Mon Sep 17 00:00:00 2001 From: Jonathan Leitschuh Date: Tue, 11 Feb 2020 00:04:34 -0500 Subject: [PATCH 1/2] Use HTTPS instead of HTTP to resolve dependencies This fixes a security vulnerability in this project where the `pom.xml` files were configuring Maven to resolve dependencies over HTTP instead of HTTPS. Signed-off-by: Jonathan Leitschuh --- media/moxy/pom.xml | 2 +- pom.xml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/media/moxy/pom.xml b/media/moxy/pom.xml index 0b7a2448c3..687091f6ec 100644 --- a/media/moxy/pom.xml +++ b/media/moxy/pom.xml @@ -130,7 +130,7 @@ eclipselink.repository Eclipse Maven Repository - http://download.eclipse.org/rt/eclipselink/maven.repo + https://download.eclipse.org/rt/eclipselink/maven.repo default diff --git a/pom.xml b/pom.xml index 7cc41678d1..9b0425c0d8 100644 --- a/pom.xml +++ b/pom.xml @@ -1105,7 +1105,7 @@ eclipselink.repository Eclipse Maven Repository - http://www.eclipse.org/downloads/download.php?r=1&nf=1&file=/rt/eclipselink/maven.repo + https://www.eclipse.org/downloads/download.php?r=1&nf=1&file=/rt/eclipselink/maven.repo default From 1f9bd2145369d8abe9f0f35f2bfe2324dce34238 Mon Sep 17 00:00:00 2001 From: Maxim Nesen <24524084+senivam@users.noreply.github.com> Date: Wed, 12 Feb 2020 07:34:37 +0100 Subject: [PATCH 2/2] Update pom.xml --- media/moxy/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/media/moxy/pom.xml b/media/moxy/pom.xml index 687091f6ec..1b02cc571f 100644 --- a/media/moxy/pom.xml +++ b/media/moxy/pom.xml @@ -1,7 +1,7 @@