NeuronRobotics / nrjavaserial

A Java Serial Port system. This is a fork of the RXTX project that uses in jar loading of the native code.
Other
345 stars 143 forks source link

Upgrade commons-net to 3.9.0 to address CVE-2021-37533 #241

Closed wborn closed 1 year ago

wborn commented 1 year ago

This newer version addresses CVE-2021-37533 which prevents issues for users who use this older version as a transitive nrjavaserial dependency.

For release notes, see:

https://commons.apache.org/proper/commons-net/changes-report.html

Fixes #237

MrDOS commented 1 year ago

Thanks for the reminder 🙂

wborn commented 1 year ago

Thank you for the quick merge and excellent work on fixing the build issues and efforts for adding Apple Silicon support. :slightly_smiling_face:

sblantipodi commented 1 year ago

are there any plan for a new release?