search

baloise / digital-signature

a digital signature confluence macro
https://marketplace.atlassian.com/1217404
Apache License 2.0
8 stars 8 forks source link

Confluence plugin safety regarding log4j (CVE-2021-44228, CVE-2021-45046 and CVE-2021-45105) #81

Closed jakubpochyla closed 2 years ago

jakubpochyla commented 2 years ago

Hello,

probably you have heard already the news about the security issue regarding the log4j library. I am referring to this article by Atlassian. https://confluence.atlassian.com/security/multiple-products-security-advisory-log4j-vulnerable-to-remote-code-execution-cve-2021-44228-1103069934.html

According to this article, Atlassian cannot guarantee, that third party plugins are not affected by the vulnerability. Since we are using the following plugins provided by your company, I want to inquire if you can state with certainty, that your plugins are not affect. In case they are affected, when will a fix or updated be released?

We are running Confluence Server 7.13.2 Plugin: digital-signature 7.0.4

Please reach out to me, if you have questions or need additional information.

Thank you and best regards, Jakub

Tiliavir commented 2 years ago

Hi Jakub

this project is using slf4j and has therefore no direct dependency to log4j but is relying on the version provided by your confluence installation which is (most probably) 1.2.17.

For details refer to the output of mvn dependency:tree below - relevant line: [INFO] | +- log4j:log4j:jar:1.2.17:provided.

Therefore the official atlassian documentation applies.

Merry Christmas Markus

[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ digital-signature ---
[INFO] com.baloise.confluence:digital-signature:atlassian-plugin:7.0.5
[INFO] +- com.vladsch.flexmark:flexmark:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-ast:jar:0.60.2:compile
[INFO] |  |  \- org.jetbrains:annotations:jar:15.0:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-builder:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-collection:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-data:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-dependency:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-format:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-html:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-misc:jar:0.60.2:compile
[INFO] |  +- com.vladsch.flexmark:flexmark-util-sequence:jar:0.60.2:compile
[INFO] |  \- com.vladsch.flexmark:flexmark-util-visitor:jar:0.60.2:compile
[INFO] +- junit:junit:jar:4.13.1:test
[INFO] |  \- org.hamcrest:hamcrest-core:jar:1.3:provided
[INFO] +- com.atlassian.confluence:confluence:jar:7.4.0:provided
[INFO] |  +- com.atlassian.filestore:dt-filestore-httpclient:jar:1.3.0:provided
[INFO] |  |  +- com.atlassian.filestore:dt-filestore-client-api:jar:1.3.0:provided
[INFO] |  |  \- com.atlassian.filestore:dt-filestore-client-core:jar:1.3.0:provided
[INFO] |  |     \- org.bitbucket.b_c:jose4j:jar:0.4.2:provided
[INFO] |  +- com.atlassian.media:dt-media-api-httpclient:jar:2.0.4:provided
[INFO] |  |  +- com.atlassian.media:dt-media-api-client-api:jar:2.0.4:provided
[INFO] |  |  \- com.atlassian.media:dt-media-api-client-core:jar:2.0.4:provided
[INFO] |  +- com.atlassian.security:atlassian-secure-xml:jar:3.2.14:provided
[INFO] |  +- org.xerial.snappy:snappy-java:jar:1.1.1.7:provided
[INFO] |  +- com.atlassian.crowd:embedded-crowd-api:jar:2.10.5-j11-3:provided
[INFO] |  |  \- com.atlassian.annotations:atlassian-annotations:jar:2.1.0:provided
[INFO] |  +- com.atlassian.crowd:crowd-events:jar:2.10.5-j11-3:provided
[INFO] |  |  \- com.atlassian.crowd:crowd-api:jar:2.10.5-j11-3:provided
[INFO] |  |     \- javax.mail:mail:jar:1.4.7:provided
[INFO] |  +- com.atlassian.crowd:crowd-core:jar:2.10.5-j11-3:provided
[INFO] |  |  +- com.atlassian.crowd:crowd-ldap:jar:2.10.5-j11-3:provided
[INFO] |  |  |  \- com.google.code.findbugs:annotations:jar:3.0.0:provided
[INFO] |  |  +- com.atlassian.crowd:crowd-persistence-file:jar:2.10.5-j11-3:provided
[INFO] |  |  +- com.atlassian.security:atlassian-secure-random:jar:3.2.4:provided
[INFO] |  |  +- com.atlassian.crowd:crowd-core-tiny:jar:2.10.5-j11-3:provided
[INFO] |  |  +- org.apache.httpcomponents:httpclient:jar:4.5.1:provided
[INFO] |  |  |  \- org.apache.httpcomponents:httpcore:jar:4.4.3:provided
[INFO] |  |  \- org.springframework:spring-beans:jar:3.2.10.RELEASE:provided
[INFO] |  +- com.atlassian.crowd:crowd-integration-api:jar:2.10.5-j11-3:provided
[INFO] |  +- com.atlassian.crowd:crowd-integration-seraph:jar:2.10.5-j11-3:provided
[INFO] |  |  \- com.atlassian.crowd:crowd-integration-client-common:jar:2.10.5-j11-3:provided
[INFO] |  |     \- com.atlassian.security:atlassian-cookie-tools:jar:3.2.4:provided
[INFO] |  +- com.atlassian.crowd:embedded-crowd-spi:jar:2.10.5-j11-3:provided
[INFO] |  +- com.atlassian.crowd:crowd-password-encoders:jar:2.10.5-j11-3:provided
[INFO] |  |  +- com.atlassian.security:atlassian-password-encoder:jar:3.2.4:provided
[INFO] |  |  \- org.springframework.security:spring-security-core:jar:3.2.5.RELEASE:provided
[INFO] |  +- com.google.code.findbugs:findbugs-annotations:jar:3.0.1:provided
[INFO] |  +- com.atlassian.confluence:atlassian-embedded-crowd-atlassian-user:jar:7.4.0:provided
[INFO] |  +- com.atlassian.crowd:embedded-crowd-core:jar:2.10.5-j11-3:provided
[INFO] |  |  \- com.atlassian.crowd:crowd-remote:jar:2.10.5-j11-3:provided
[INFO] |  |     \- com.atlassian.crowd:crowd-integration-client-rest:jar:2.10.5-j11-3:provided
[INFO] |  |        \- org.apache.httpcomponents:httpclient-cache:jar:4.5.1:provided
[INFO] |  +- com.atlassian.crowd:crowd-query-language:jar:2.10.5-j11-3:provided
[INFO] |  |  \- org.antlr:antlr-runtime:jar:3.5.2:provided
[INFO] |  +- com.atlassian.crowd:crowd-persistence:jar:2.10.5-j11-3:provided
[INFO] |  +- com.atlassian.healthcheck:atlassian-healthcheck-plugin-check-api:jar:6.0.0:provided
[INFO] |  +- com.atlassian.healthcheck:atlassian-healthcheck-spi:jar:6.0.0:provided
[INFO] |  +- org.springframework.ldap:spring-ldap-core:jar:2.3.2.RELEASE:provided
[INFO] |  |  +- org.springframework:spring-core:jar:4.3.4.RELEASE:provided
[INFO] |  |  \- org.springframework:spring-tx:jar:4.3.4.RELEASE:provided
[INFO] |  +- com.atlassian.confluence:confluence-upgrade:jar:7.4.0:provided
[INFO] |  |  +- com.atlassian.plugins:atlassian-plugins-api:jar:5.3.6:provided
[INFO] |  |  +- org.checkerframework:checker-qual:jar:2.8.1:provided
[INFO] |  |  \- com.google.errorprone:error_prone_annotations:jar:2.3.4:provided
[INFO] |  +- com.atlassian.confluence.compat:confluence-compat-lib:jar:1.0.0:provided
[INFO] |  +- com.atlassian.integration.jira:jira-integration-spi:jar:6.2.4:provided
[INFO] |  +- com.atlassian.gzipfilter:atlassian-gzipfilter:jar:3.0.0:provided
[INFO] |  |  \- com.atlassian.gzipfilter:atlassian-flushable-gzipoutputstream:jar:1.1:provided
[INFO] |  +- com.atlassian.analytics:analytics-api:jar:5.6.0:provided
[INFO] |  +- com.atlassian.applinks:applinks-api:jar:6.0.12:provided
[INFO] |  +- com.atlassian.applinks:applinks-spi:jar:6.0.12:provided
[INFO] |  +- com.atlassian.applinks:applinks-host:jar:6.0.12:provided
[INFO] |  +- com.atlassian.cluster.monitoring:cluster-monitoring-spi:jar:3.0.2:provided
[INFO] |  +- com.atlassian.dragonfly:dragonfly-api:jar:1.1:provided
[INFO] |  +- com.atlassian.dragonfly:dragonfly-spi:jar:1.1:provided
[INFO] |  +- com.atlassian.dragonfly:dragonfly-core:jar:1.1:provided
[INFO] |  +- com.atlassian.util.concurrent:atlassian-util-concurrent:jar:3.0.0:provided
[INFO] |  +- io.atlassian.util.concurrent:atlassian-util-concurrent:jar:4.0.1:provided
[INFO] |  +- com.atlassian.modzdetector:modz-detector:jar:0.14:provided
[INFO] |  +- com.atlassian.mail:atlassian-mail:jar:5.0.1:provided
[INFO] |  |  +- commons-logging:commons-logging:jar:1.0.4:provided
[INFO] |  |  +- javax.mail:javax.mail-api:jar:1.5.6:provided
[INFO] |  |  \- com.atlassian:atlassian-localhost:jar:1.1.0:provided
[INFO] |  +- com.atlassian.velocity:atlassian-velocity:jar:1.3:provided
[INFO] |  +- com.atlassian.core:atlassian-core:jar:7.0.1:provided
[INFO] |  |  \- com.atlassian.image:atlassian-image-consumer:jar:1.0.1:provided
[INFO] |  +- com.atlassian.core:atlassian-core-thumbnail:jar:7.0.1:provided
[INFO] |  |  +- com.twelvemonkeys.imageio:imageio-jpeg:jar:3.4.1:provided
[INFO] |  |  |  \- com.twelvemonkeys.imageio:imageio-metadata:jar:3.4.1:provided
[INFO] |  |  \- com.twelvemonkeys.imageio:imageio-tiff:jar:3.4.1:provided
[INFO] |  +- com.atlassian.core:atlassian-core-user:jar:7.0.1:provided
[INFO] |  +- com.atlassian.config:atlassian-config:jar:1.0.1:provided
[INFO] |  +- com.twelvemonkeys.imageio:imageio-bmp:jar:3.4.1:provided
[INFO] |  |  +- com.twelvemonkeys.imageio:imageio-core:jar:3.4.1:provided
[INFO] |  |  +- com.twelvemonkeys.common:common-lang:jar:3.4.1:provided
[INFO] |  |  +- com.twelvemonkeys.common:common-io:jar:3.4.1:provided
[INFO] |  |  \- com.twelvemonkeys.common:common-image:jar:3.4.1:provided
[INFO] |  +- com.twelvemonkeys.imageio:imageio-icns:jar:3.4.1:provided
[INFO] |  +- com.atlassian.spring:atlassian-spring:jar:2.0.8:provided
[INFO] |  |  +- org.springframework:spring-jdbc:jar:2.0.6:provided
[INFO] |  |  |  \- org.springframework:spring-dao:jar:2.0.6:provided
[INFO] |  |  +- org.springframework:spring-context:jar:2.0.6:provided
[INFO] |  |  |  \- aopalliance:aopalliance:jar:1.0:provided
[INFO] |  |  \- org.springframework:spring-web:jar:2.0.6:provided
[INFO] |  +- com.atlassian.spring:atlassian-spring-hibernate2:jar:2.0.8:provided
[INFO] |  |  \- org.springframework:spring-hibernate2:jar:2.0.6:provided
[INFO] |  +- com.atlassian.event:atlassian-event:jar:4.0.1:provided
[INFO] |  +- com.atlassian.confluence:confluence-bucket:jar:7.4.0:provided
[INFO] |  +- com.atlassian.hibernate:atlassian-hibernate2-extras:jar:6.2.5:provided
[INFO] |  +- com.atlassian.xwork:atlassian-xwork-10:jar:2.1.0:provided
[INFO] |  +- com.atlassian.xwork:atlassian-xwork-core:jar:2.1.0:provided
[INFO] |  +- com.atlassian.profiling:atlassian-profiling:jar:3.4.3:provided
[INFO] |  +- com.atlassian.profiling:atlassian-profiling-dropwizard-metrics:jar:3.4.3:provided
[INFO] |  |  \- io.dropwizard.metrics:metrics-core:jar:4.0.3:provided
[INFO] |  +- com.atlassian.profiling:atlassian-profiling-micrometer:jar:3.4.3:provided
[INFO] |  |  \- io.micrometer:micrometer-core:jar:1.2.0:provided
[INFO] |  |     +- org.hdrhistogram:HdrHistogram:jar:2.1.11:provided
[INFO] |  |     \- org.latencyutils:LatencyUtils:jar:2.0.3:provided
[INFO] |  +- io.dropwizard.metrics:metrics-jmx:jar:4.0.6:provided
[INFO] |  +- io.micrometer:micrometer-registry-influx:jar:1.1.5:provided
[INFO] |  +- com.atlassian.threadlocal:atlassian-threadlocal:jar:1.4:provided
[INFO] |  +- com.atlassian.trackback:atlassian-trackback:jar:0.10:provided
[INFO] |  +- com.atlassian.extras:atlassian-extras-core:jar:3.4.1:provided
[INFO] |  |  +- com.atlassian.extras:atlassian-extras-api:jar:3.4.1:provided
[INFO] |  |  +- com.atlassian.extras:atlassian-extras-common:jar:3.4.1:provided
[INFO] |  |  +- com.atlassian.extras:atlassian-extras-legacy:jar:3.4.1:provided
[INFO] |  |  |  \- com.atlassian.extras:atlassian-extras-decoder-api:jar:3.4.1:provided
[INFO] |  |  \- com.atlassian.extras:atlassian-extras-decoder-v2:jar:3.4.1:provided
[INFO] |  +- com.atlassian.ip:atlassian-ip:jar:3.1:provided
[INFO] |  +- com.atlassian.johnson:atlassian-johnson-core:jar:4.0.0:provided
[INFO] |  +- com.atlassian.johnson:atlassian-johnson-plugins:jar:4.0.0:provided
[INFO] |  +- com.atlassian.html:atlassian-html-encoder:jar:1.5:provided
[INFO] |  +- com.atlassian.json:atlassian-json-jsonorg:jar:0.11:provided
[INFO] |  |  \- com.atlassian.json:atlassian-json-api:jar:0.11:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-core:jar:5.3.6:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-servlet:jar:5.3.6:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-webresource-common:jar:5.3.6:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-webfragment-api:jar:5.0.0:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-webfragment:jar:5.0.0:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-webresource:jar:4.1.2:provided
[INFO] |  |  +- com.atlassian.plugins:atlassian-plugins-webresource-spi:jar:4.1.2:provided
[INFO] |  |  +- com.atlassian.plugins:atlassian-plugins-webresource-api:jar:4.1.2:provided
[INFO] |  |  \- com.atlassian.sourcemap:sourcemap:jar:1.7.6:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-osgi:jar:5.3.6:provided
[INFO] |  |  +- com.atlassian.plugins:atlassian-plugins-osgi-events:jar:5.3.6:provided
[INFO] |  |  +- biz.aQute.bnd:biz.aQute.bndlib:jar:3.5.0:provided
[INFO] |  |  +- org.apache.felix:org.apache.felix.framework:jar:5.6.12:provided
[INFO] |  |  +- io.github.lukehutch:fast-classpath-scanner:jar:2.18.1:provided
[INFO] |  |  \- org.twdata.pkgscanner:package-scanner:jar:0.9.5:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-schema:jar:5.3.6:provided
[INFO] |  +- com.atlassian.plugins:atlassian-plugins-spring:jar:5.3.6:provided
[INFO] |  |  +- org.springframework:spring-expression:jar:5.0.10.RELEASE:provided
[INFO] |  |  +- org.springframework:spring-aop:jar:5.0.10.RELEASE:provided
[INFO] |  |  +- org.springframework:spring-context-support:jar:5.0.10.RELEASE:provided
[INFO] |  |  \- org.springframework:spring-webmvc:jar:5.0.10.RELEASE:provided
[INFO] |  +- com.atlassian.plugins:atlassian-spring-interceptor-adapter-spi:jar:1.1:provided
[INFO] |  +- com.atlassian.bandana:atlassian-bandana:jar:3.1:provided
[INFO] |  +- com.atlassian.user:atlassian-user:jar:3.0:provided
[INFO] |  +- com.atlassian.renderer:atlassian-renderer-legacy:jar:6.2.25:provided
[INFO] |  |  \- javax.activation:activation:jar:1.0.2:provided
[INFO] |  +- com.atlassian.webhooks:atlassian-webhooks-api:jar:6.1.0:provided
[INFO] |  +- com.atlassian.webhooks:atlassian-webhooks-spi:jar:6.1.0:provided
[INFO] |  +- net.sourceforge.nekohtml:nekohtml:jar:1.9.22:provided
[INFO] |  +- com.atlassian.bonnie:atlassian-bonnie:jar:7.0.2:provided
[INFO] |  |  +- com.atlassian.bonnie:lucene-upgrader:jar:lucene36:1.0:provided
[INFO] |  |  +- org.apache.pdfbox:pdfbox:jar:2.0.6:provided
[INFO] |  |  |  \- org.apache.pdfbox:fontbox:jar:2.0.6:provided
[INFO] |  |  \- com.ibm.icu:icu4j:jar:3.8:provided
[INFO] |  +- org.bouncycastle:bcprov-jdk15on:jar:1.64:provided
[INFO] |  +- org.bouncycastle:bcmail-jdk15on:jar:1.64:provided
[INFO] |  |  \- org.bouncycastle:bcpkix-jdk15on:jar:1.64:provided
[INFO] |  +- com.atlassian.jdk.utilities:atlassian-jdk-utilities:jar:0.6:provided
[INFO] |  +- joda-time:joda-time:jar:2.9.9:provided
[INFO] |  +- com.atlassian.seraph:atlassian-seraph:jar:4.0.4:provided
[INFO] |  |  \- com.atlassian.security:atlassian-secure-utils:jar:3.2.11:provided
[INFO] |  +- com.atlassian.security.auth.trustedapps:atlassian-trusted-apps-core:jar:5.0.1:provided
[INFO] |  +- com.atlassian.security.auth.trustedapps:atlassian-trusted-apps-seraph-integration:jar:5.0.1:provided
[INFO] |  +- com.atlassian.plugins:avatar-plugin-api:jar:1.3.5:provided
[INFO] |  +- log4j:log4j:jar:1.2.17:provided
[INFO] |  +- org.slf4j:slf4j-api:jar:1.7.25:provided
[INFO] |  +- org.slf4j:jul-to-slf4j:jar:1.7.25:provided
[INFO] |  +- org.slf4j:jcl-over-slf4j:jar:1.7.25:provided
[INFO] |  +- commons-beanutils:commons-beanutils:jar:1.9.4:provided
[INFO] |  +- commons-codec:commons-codec:jar:1.12:provided
[INFO] |  +- commons-collections:commons-collections:jar:3.2.2:provided
[INFO] |  +- org.apache.commons:commons-collections4:jar:4.3:provided
[INFO] |  +- org.apache.commons:commons-compress:jar:1.19:provided
[INFO] |  +- commons-digester:commons-digester:jar:1.5:provided
[INFO] |  +- commons-discovery:commons-discovery:jar:0.5:provided
[INFO] |  +- commons-fileupload:commons-fileupload:jar:1.4:provided
[INFO] |  +- commons-io:commons-io:jar:2.6:provided
[INFO] |  +- commons-lang:commons-lang:jar:2.6:provided
[INFO] |  +- org.apache.commons:commons-lang3:jar:3.9:provided
[INFO] |  +- org.apache.commons:commons-math3:jar:3.6.1:provided
[INFO] |  +- commons-pool:commons-pool:jar:1.6:provided
[INFO] |  +- org.apache.commons:commons-pool2:jar:2.6.2:provided
[INFO] |  +- commons-validator:commons-validator:jar:1.5.1:provided
[INFO] |  +- net.sf.supercsv:super-csv:jar:2.1.0:provided
[INFO] |  +- hibernate:hibernate:jar:2.1.8-atlassian-34:provided
[INFO] |  +- org.hibernate:hibernate-core:jar:5.2.8.Final:provided
[INFO] |  |  +- org.jboss.logging:jboss-logging:jar:3.3.0.Final:provided
[INFO] |  |  +- org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:provided
[INFO] |  |  +- org.javassist:javassist:jar:3.20.0-GA:provided
[INFO] |  |  +- antlr:antlr:jar:2.7.7:provided
[INFO] |  |  +- org.jboss:jandex:jar:2.0.3.Final:provided
[INFO] |  |  +- com.fasterxml:classmate:jar:1.3.0:provided
[INFO] |  |  \- org.hibernate.common:hibernate-commons-annotations:jar:5.0.1.Final:provided
[INFO] |  +- org.hibernate:hibernate-c3p0:jar:5.2.8.Final:provided
[INFO] |  +- com.atlassian.hibernate:hibernate.adapter:jar:1.0.3:provided
[INFO] |  |  +- org.hibernate:hibernate-envers:jar:5.2.2.Final:provided
[INFO] |  |  \- org.jboss.logging:jboss-logging-annotations:jar:2.0.0.Final:provided
[INFO] |  +- cglib:cglib:jar:3.2.12:provided
[INFO] |  |  \- org.ow2.asm:asm:jar:7.1:provided
[INFO] |  +- org.apache.ant:ant:jar:1.10.7:provided
[INFO] |  |  \- org.apache.ant:ant-launcher:jar:1.10.7:provided
[INFO] |  +- dom4j:dom4j:jar:1.6.1-atlassian-2:provided
[INFO] |  +- jaxen:jaxen:jar:1.1.6:provided
[INFO] |  +- odmg:odmg:jar:3.0:provided
[INFO] |  +- com.mchange:c3p0:jar:0.9.5.4:provided
[INFO] |  |  \- com.mchange:mchange-commons-java:jar:0.2.15:provided
[INFO] |  +- javax.transaction:javax.transaction-api:jar:1.2:provided
[INFO] |  +- com.sun:jai_core:jar:1.1.3:provided
[INFO] |  +- com.sun:jai_codec:jar:1.1.3:provided
[INFO] |  +- opensymphony:webwork:jar:2.1.5-atlassian-3:provided
[INFO] |  +- opensymphony:xwork:jar:1.0.3.6:provided
[INFO] |  +- ognl:ognl:jar:2.6.5-atlassian-3:provided
[INFO] |  +- opensymphony:oscore:jar:2.2.7-atlassian-1:provided
[INFO] |  +- oscache:oscache:jar:2.2:provided
[INFO] |  +- osuser:osuser:jar:atl.user:provided
[INFO] |  +- opensymphony:propertyset:jar:1.3-21Nov03:provided
[INFO] |  +- org.apache.velocity:velocity:jar:1.6.4-atlassian-19:provided
[INFO] |  |  \- org.apache.commons:commons-text:jar:1.6:provided
[INFO] |  +- com.atlassian.soy:soy-template-renderer-api:jar:5.0.0:provided
[INFO] |  +- com.atlassian.soy:soy-template-renderer-plugin-api:jar:5.0.0:provided
[INFO] |  +- com.sun.activation:javax.activation:jar:1.2.0:provided
[INFO] |  +- javax.annotation:javax.annotation-api:jar:1.3.2:provided
[INFO] |  +- javax.xml.bind:jaxb-api:jar:2.3.1:provided
[INFO] |  |  \- javax.activation:javax.activation-api:jar:1.2.0:provided
[INFO] |  +- org.glassfish.jaxb:jaxb-runtime:jar:2.3.1:provided
[INFO] |  |  +- org.glassfish.jaxb:txw2:jar:2.3.1:provided
[INFO] |  |  +- com.sun.istack:istack-commons-runtime:jar:3.0.7:provided
[INFO] |  |  +- org.jvnet.staxex:stax-ex:jar:1.8:provided
[INFO] |  |  \- com.sun.xml.fastinfoset:FastInfoset:jar:1.2.15:provided
[INFO] |  +- org.glassfish:javax.json:jar:1.1.4:provided
[INFO] |  +- javax.xml.ws:jaxws-api:jar:2.3.1:provided
[INFO] |  |  \- javax.xml.soap:javax.xml.soap-api:jar:1.4.0:provided
[INFO] |  +- com.sun.xml.ws:jaxws-rt:jar:2.3.1:provided
[INFO] |  |  +- javax.jws:javax.jws-api:jar:1.1:provided
[INFO] |  |  +- com.sun.xml.ws:policy:jar:2.7.5:provided
[INFO] |  |  +- org.glassfish.gmbal:gmbal-api-only:jar:3.1.0-b001:provided
[INFO] |  |  |  \- org.glassfish.external:management-api:jar:3.0.0-b012:provided
[INFO] |  |  +- com.sun.xml.stream.buffer:streambuffer:jar:1.5.6:provided
[INFO] |  |  +- org.glassfish.ha:ha-api:jar:3.1.9:provided
[INFO] |  |  \- com.sun.xml.messaging.saaj:saaj-impl:jar:1.5.0:provided
[INFO] |  +- com.sun.mail:javax.mail:jar:1.6.2:provided
[INFO] |  +- javax.validation:validation-api:jar:2.0.1.Final:provided
[INFO] |  +- org.hibernate.validator:hibernate-validator:jar:6.0.17.Final:provided
[INFO] |  +- com.atlassian.spring:spring-quartz1:jar:0.1.0:provided
[INFO] |  +- org.aspectj:aspectjweaver:jar:1.9.4:provided
[INFO] |  +- opensymphony:sitemesh:jar:2.5-atlassian-6:provided
[INFO] |  +- velocity-tools:velocity-tools:jar:1.4:provided
[INFO] |  +- radeox:radeox:jar:1.0b2-forked-22Apr2004:provided
[INFO] |  +- org.apache.lucene:lucene-core:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-analyzers-common:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-analyzers-kuromoji:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-analyzers-stempel:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-misc:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-highlighter:jar:4.4.0-atlassian-02:provided
[INFO] |  |  +- org.apache.lucene:lucene-memory:jar:4.4.0-atlassian-02:provided
[INFO] |  |  \- org.apache.lucene:lucene-queries:jar:4.4.0-atlassian-02:provided
[INFO] |  +- org.apache.lucene:lucene-queryparser:jar:4.4.0-atlassian-02:provided
[INFO] |  |  \- org.apache.lucene:lucene-sandbox:jar:4.4.0-atlassian-02:provided
[INFO] |  |     \- jakarta-regexp:jakarta-regexp:jar:1.4:provided
[INFO] |  +- org.apache.pdfbox:xmpbox:jar:2.0.16:provided
[INFO] |  +- org.hibernate:jtidy:jar:r8-20060801:provided
[INFO] |  +- org.quartz-scheduler:quartz:jar:1.8.6:provided
[INFO] |  +- com.atlassian.scheduler:atlassian-scheduler-api:jar:3.0.0:provided
[INFO] |  +- com.atlassian.scheduler:atlassian-scheduler-core:jar:3.0.0:provided
[INFO] |  +- com.atlassian.scheduler.caesium:atlassian-scheduler-caesium:jar:3.0.0:provided
[INFO] |  +- org.hsqldb:hsqldb:jar:2.3.0:provided
[INFO] |  +- com.h2database:h2:jar:1.4.196:provided
[INFO] |  +- com.atlassian.hsqldb:atlassian-hsqdlb-server-integration:jar:1.1.0:provided
[INFO] |  +- com.atlassian.h2:atlassian-h2-server-integration:jar:2.1.0:provided
[INFO] |  +- org.postgresql:postgresql:jar:42.2.8:provided
[INFO] |  +- com.microsoft.sqlserver:mssql-jdbc:jar:6.3.0.jre8-preview:provided
[INFO] |  +- net.sourceforge.jtds:jtds:jar:1.3.1:provided
[INFO] |  +- rome:rome:jar:1.0:provided
[INFO] |  +- org.jdom:jdom:jar:1.1.3:provided
[INFO] |  +- commons-jrcs:commons-jrcs:jar:diff-0.1.7:provided
[INFO] |  +- commons-httpclient:commons-httpclient:jar:3.1-atlassian-2:provided
[INFO] |  +- xerces:xercesImpl:jar:2.12.0:provided
[INFO] |  +- xmlrpc:xmlrpc:jar:2.0+xmlrpc61.1+sbfix:provided
[INFO] |  +- com.atlassian.xmlrpc:xmlrpc-supplementary-character-support:jar:0.2:provided
[INFO] |  +- oro:oro:jar:2.0.8:provided
[INFO] |  +- com.thoughtworks.xstream:xstream:jar:1.1.1:provided
[INFO] |  |  \- xpp3:xpp3_min:jar:1.1.3.4.O:provided
[INFO] |  +- xalan:xalan:jar:2.7.2:provided
[INFO] |  |  \- xalan:serializer:jar:2.7.2:provided
[INFO] |  +- xml-apis:xml-apis:jar:1.4.01:provided
[INFO] |  +- xml-apis:xml-apis-ext:jar:1.3.04:provided
[INFO] |  +- org.codehaus.woodstox:wstx-asl:jar:3.2.9-atlassian-1:provided
[INFO] |  +- io.leopard.thirdparty:jcaptcha-api:jar:2.0.0:provided
[INFO] |  +- io.leopard.thirdparty:jcaptcha-core:jar:2.0.0:provided
[INFO] |  |  \- com.jhlabs:filters:jar:2.0.235:provided
[INFO] |  +- org.tuckey:urlrewritefilter:jar:4.0.4:provided
[INFO] |  +- wsdl4j:wsdl4j:jar:1.6.3:provided
[INFO] |  +- com.google.code.findbugs:jsr305:jar:3.0.2:provided
[INFO] |  +- net.javacrumbs.future-converter:future-converter-java8-guava:jar:1.2.0:provided
[INFO] |  |  +- net.javacrumbs.future-converter:future-converter-common:jar:1.2.0:provided
[INFO] |  |  +- net.javacrumbs.future-converter:future-converter-java8-common:jar:1.2.0:provided
[INFO] |  |  \- net.javacrumbs.future-converter:future-converter-guava-common:jar:1.2.0:provided
[INFO] |  +- net.jcip:jcip-annotations:jar:1.0:provided
[INFO] |  +- com.atlassian.vcache:atlassian-vcache-api:jar:1.12.0:provided
[INFO] |  |  \- com.atlassian.marshalling:atlassian-marshalling-api:jar:1.0.0:provided
[INFO] |  +- com.atlassian.vcache:atlassian-vcache-internal-legacy:jar:1.12.0:provided
[INFO] |  |  \- com.atlassian.vcache:atlassian-vcache-internal-core:jar:1.12.0:provided
[INFO] |  |     \- com.atlassian.vcache:atlassian-vcache-internal-api:jar:1.12.0:provided
[INFO] |  +- com.atlassian.marshalling:atlassian-marshalling-gson:jar:3.0.1:provided
[INFO] |  +- com.atlassian.marshalling:atlassian-marshalling-jdk:jar:1.1.0:provided
[INFO] |  +- com.atlassian.marshalling:atlassian-marshalling-protobuf:jar:1.0.0:provided
[INFO] |  +- com.atlassian.cache:atlassian-cache-api:jar:5.1.1:provided
[INFO] |  +- com.atlassian.cache:atlassian-cache-memory:jar:5.1.1:provided
[INFO] |  |  \- com.atlassian.cache:atlassian-cache-common-impl:jar:5.1.1:provided
[INFO] |  +- com.atlassian.beehive:beehive-api:jar:2.0.0:provided
[INFO] |  +- com.atlassian.sal:sal-spi:jar:4.0.0:provided
[INFO] |  +- com.atlassian.sal:sal-spring:jar:4.0.0:provided
[INFO] |  +- com.atlassian.sal:sal-core:jar:4.0.0:provided
[INFO] |  |  +- org.apache.httpcomponents:httpmime:jar:4.5.5:provided
[INFO] |  |  \- org.hamcrest:hamcrest-library:jar:1.3:provided
[INFO] |  +- com.atlassian.sal:sal-api:jar:4.0.0:provided
[INFO] |  +- com.atlassian.sal:sal-trust-api:jar:4.0.0:provided
[INFO] |  +- com.atlassian.confluence:confluence-java-api:jar:7.4.0:provided
[INFO] |  |  \- com.atlassian.graphql:atlassian-graphql-annotations:jar:1.3.7:provided
[INFO] |  +- com.atlassian.confluence:confluence-rest-api:jar:7.4.0:provided
[INFO] |  +- com.atlassian.confluence:confluence-rest-serialization:jar:7.4.0:provided
[INFO] |  +- org.codehaus.jackson:jackson-core-asl:jar:1.9.13-atlassian-4:provided
[INFO] |  +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13-atlassian-4:provided
[INFO] |  +- com.fasterxml.jackson.core:jackson-annotations:jar:2.10.1:provided
[INFO] |  +- com.fasterxml.jackson.core:jackson-core:jar:2.10.1:provided
[INFO] |  +- com.fasterxml.jackson.core:jackson-databind:jar:2.10.1:provided
[INFO] |  +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.10.1:provided
[INFO] |  +- com.atlassian.activeobjects:activeobjects-dbex:jar:3.2.2:provided
[INFO] |  |  \- com.atlassian.activeobjects:activeobjects-spi:jar:3.2.2:provided
[INFO] |  +- org.owasp.antisamy:antisamy:jar:1.5.3-atlassian-7:provided
[INFO] |  +- org.apache.xmlgraphics:batik-codec:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-awt-util:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-bridge:jar:1.11:provided
[INFO] |  |  |  +- org.apache.xmlgraphics:batik-parser:jar:1.11:provided
[INFO] |  |  |  +- org.apache.xmlgraphics:batik-script:jar:1.11:provided
[INFO] |  |  |  \- org.apache.xmlgraphics:batik-svg-dom:jar:1.11:provided
[INFO] |  |  \- org.apache.xmlgraphics:batik-util:jar:1.11:provided
[INFO] |  |     +- org.apache.xmlgraphics:batik-constants:jar:1.11:provided
[INFO] |  |     \- org.apache.xmlgraphics:batik-i18n:jar:1.11:provided
[INFO] |  +- org.apache.xmlgraphics:batik-css:jar:1.11:provided
[INFO] |  |  \- org.apache.xmlgraphics:xmlgraphics-commons:jar:2.3:provided
[INFO] |  +- org.apache.xmlgraphics:batik-ext:jar:1.11:provided
[INFO] |  +- org.apache.xmlgraphics:batik-transcoder:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-anim:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-dom:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-gvt:jar:1.11:provided
[INFO] |  |  +- org.apache.xmlgraphics:batik-svggen:jar:1.11:provided
[INFO] |  |  \- org.apache.xmlgraphics:batik-xml:jar:1.11:provided
[INFO] |  +- org.outerj.daisy:daisydiff:jar:1.1.14-atlassian-hosted:provided
[INFO] |  |  \- org.eclipse.core:runtime:jar:20070801:provided
[INFO] |  +- com.atlassian.velocity.htmlsafe:velocity-htmlsafe:jar:3.1.0:provided
[INFO] |  +- com.atlassian.botocss:botocss-core:jar:6.3:provided
[INFO] |  |  +- org.jsoup:jsoup:jar:1.8.3:provided
[INFO] |  |  \- net.sf.cssbox:jstyleparser:jar:1.16-atlassian-1:provided
[INFO] |  +- com.google.guava:guava:jar:26.0-jre:provided
[INFO] |  |  +- com.google.j2objc:j2objc-annotations:jar:1.1:provided
[INFO] |  |  \- org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:provided
[INFO] |  +- com.atlassian.fugue:fugue:jar:2.7.0:provided
[INFO] |  +- io.atlassian.fugue:fugue:jar:4.7.2:provided
[INFO] |  +- io.atlassian.fugue:fugue-deprecated:jar:4.7.2:provided
[INFO] |  +- io.atlassian.fugue:fugue-guava:jar:4.7.2:provided
[INFO] |  +- io.atlassian.fugue:fugue-optics:jar:4.7.2:provided
[INFO] |  +- io.atlassian.fugue:fugue-retry:jar:4.7.2:provided
[INFO] |  +- com.atlassian.http:atlassian-http:jar:2.0.7:provided
[INFO] |  |  \- org.apache.tika:tika-core:jar:1.22:provided
[INFO] |  +- com.atlassian.instrumentation:atlassian-instrumentation-core:jar:3.0.0:provided
[INFO] |  +- com.github.kristofa:brave-web-servlet-filter:jar:3.0.0:provided
[INFO] |  |  \- com.github.kristofa:brave-http:jar:3.0.0:provided
[INFO] |  |     \- com.github.kristofa:brave-core:jar:3.0.0:provided
[INFO] |  |        \- org.apache.thrift:libthrift:jar:0.9.0:provided
[INFO] |  +- com.github.kristofa:brave-apache-http-interceptors:jar:3.0.0:provided
[INFO] |  +- io.atlassian.zipkin:atlassian-brave-spancollector-core:jar:1.0.0:provided
[INFO] |  +- com.atlassian.tenancy:atlassian-tenancy-api:jar:3.0.1:provided
[INFO] |  +- com.atlassian.ozymandias:atlassian-plugin-point-safety:jar:1.0.0:provided
[INFO] |  +- com.github.gquintana.metrics:metrics-sql:jar:3.1.0-atlassian-4:provided
[INFO] |  +- com.github.oshi:oshi-core:jar:3.13.3:provided
[INFO] |  |  +- net.java.dev.jna:jna:jar:5.3.1:provided
[INFO] |  |  \- net.java.dev.jna:jna-platform:jar:5.3.1:provided
[INFO] |  +- com.atlassian.confluence.plugins:confluence-extractor-api-plugin:jar:2.0.8:provided
[INFO] |  +- com.atlassian.plugins:atlassian-whitelist-api-plugin:jar:4.0.7:provided
[INFO] |  +- com.atlassian.diagnostics:atlassian-diagnostics-api:jar:1.1.10:provided
[INFO] |  +- com.atlassian.diagnostics:atlassian-diagnostics-core:jar:1.1.10:provided
[INFO] |  +- com.atlassian.diagnostics:atlassian-diagnostics-platform:jar:1.1.10:provided
[INFO] |  +- com.atlassian.audit:atlassian-audit-api:jar:1.0.0:provided
[INFO] |  \- com.atlassian.audit:atlassian-audit-core:jar:1.0.0:provided
[INFO] +- com.atlassian.mywork:mywork-api:jar:1.0.2:provided
[INFO] +- com.atlassian.plugin:atlassian-spring-scanner-annotation:jar:1.2.13:compile
[INFO] +- com.atlassian.plugin:atlassian-spring-scanner-runtime:jar:1.2.13:runtime
[INFO] +- javax.inject:javax.inject:jar:1:provided
[INFO] +- org.slf4j:slf4j-simple:jar:2.0.0-alpha1:test
[INFO] +- com.atlassian.plugins:atlassian-plugins-osgi-testrunner:jar:2.0.1:test
[INFO] |  +- org.apache.wink:wink-client:jar:1.1.3-incubating:test
[INFO] |  |  +- org.apache.wink:wink-common:jar:1.1.3-incubating:test
[INFO] |  |  |  \- org.apache.geronimo.specs:geronimo-annotation_1.1_spec:jar:1.0:test
[INFO] |  |  \- com.sun.xml.bind:jaxb-impl:jar:2.2.1.1:test
[INFO] |  \- com.atlassian.upm:upm-api:jar:2.15:test
[INFO] +- javax.ws.rs:jsr311-api:jar:1.1.1:provided
[INFO] +- com.google.code.gson:gson:jar:2.2.2-atlassian-1:compile
[INFO] \- org.mockito:mockito-all:jar:1.9.0:test
jakubpochyla commented 2 years ago

Hi Markus,

thank you for the quick reply and the good news.

I wish you too relaxing holidays and Merry Christmas, Jakub

Von: Markus Lindenmann @.> Gesendet: Dienstag, 21. Dezember 2021 15:41 An: baloise/digital-signature @.> Cc: Jakub Pochyla @.>; Author @.> Betreff: Re: [baloise/digital-signature] Confluence plugin safety regarding log4j (Issue #81)

Hi Jakub

this project is using slf4j and has therefore no direct dependency to log4j but is relying on the version provided by your confluence server which is th1 1.2.17.

For details refer to the output of mvn dependency:tree below - relevant line: [INFO] | +- log4j:log4j:jar:1.2.17:provided.

Therefore the official atlassian documentationhttps://confluence.atlassian.com/kb/faq-for-cve-2021-44228-1103069406.html applies.

Merry Christmas Markus

[INFO] --- maven-dependency-plugin:2.8:tree (default-cli) @ digital-signature ---

[INFO] com.baloise.confluence:digital-signature:atlassian-plugin:7.0.5

[INFO] +- com.vladsch.flexmark:flexmark:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-ast:jar:0.60.2:compile

[INFO] | | - org.jetbrains:annotations:jar:15.0:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-builder:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-collection:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-data:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-dependency:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-format:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-html:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-misc:jar:0.60.2:compile

[INFO] | +- com.vladsch.flexmark:flexmark-util-sequence:jar:0.60.2:compile

[INFO] | - com.vladsch.flexmark:flexmark-util-visitor:jar:0.60.2:compile

[INFO] +- junit:junit:jar:4.13.1:test

[INFO] | - org.hamcrest:hamcrest-core:jar:1.3:provided

[INFO] +- com.atlassian.confluence:confluence:jar:7.4.0:provided

[INFO] | +- com.atlassian.filestore:dt-filestore-httpclient:jar:1.3.0:provided

[INFO] | | +- com.atlassian.filestore:dt-filestore-client-api:jar:1.3.0:provided

[INFO] | | - com.atlassian.filestore:dt-filestore-client-core:jar:1.3.0:provided

[INFO] | | - org.bitbucket.b_c:jose4j:jar:0.4.2:provided

[INFO] | +- com.atlassian.media:dt-media-api-httpclient:jar:2.0.4:provided

[INFO] | | +- com.atlassian.media:dt-media-api-client-api:jar:2.0.4:provided

[INFO] | | - com.atlassian.media:dt-media-api-client-core:jar:2.0.4:provided

[INFO] | +- com.atlassian.security:atlassian-secure-xml:jar:3.2.14:provided

[INFO] | +- org.xerial.snappy:snappy-java:jar:1.1.1.7:provided

[INFO] | +- com.atlassian.crowd:embedded-crowd-api:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.annotations:atlassian-annotations:jar:2.1.0:provided

[INFO] | +- com.atlassian.crowd:crowd-events:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.crowd:crowd-api:jar:2.10.5-j11-3:provided

[INFO] | | - javax.mail:mail:jar:1.4.7:provided

[INFO] | +- com.atlassian.crowd:crowd-core:jar:2.10.5-j11-3:provided

[INFO] | | +- com.atlassian.crowd:crowd-ldap:jar:2.10.5-j11-3:provided

[INFO] | | | - com.google.code.findbugs:annotations:jar:3.0.0:provided

[INFO] | | +- com.atlassian.crowd:crowd-persistence-file:jar:2.10.5-j11-3:provided

[INFO] | | +- com.atlassian.security:atlassian-secure-random:jar:3.2.4:provided

[INFO] | | +- com.atlassian.crowd:crowd-core-tiny:jar:2.10.5-j11-3:provided

[INFO] | | +- org.apache.httpcomponents:httpclient:jar:4.5.1:provided

[INFO] | | | - org.apache.httpcomponents:httpcore:jar:4.4.3:provided

[INFO] | | - org.springframework:spring-beans:jar:3.2.10.RELEASE:provided

[INFO] | +- com.atlassian.crowd:crowd-integration-api:jar:2.10.5-j11-3:provided

[INFO] | +- com.atlassian.crowd:crowd-integration-seraph:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.crowd:crowd-integration-client-common:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.security:atlassian-cookie-tools:jar:3.2.4:provided

[INFO] | +- com.atlassian.crowd:embedded-crowd-spi:jar:2.10.5-j11-3:provided

[INFO] | +- com.atlassian.crowd:crowd-password-encoders:jar:2.10.5-j11-3:provided

[INFO] | | +- com.atlassian.security:atlassian-password-encoder:jar:3.2.4:provided

[INFO] | | - org.springframework.security:spring-security-core:jar:3.2.5.RELEASE:provided

[INFO] | +- com.google.code.findbugs:findbugs-annotations:jar:3.0.1:provided

[INFO] | +- com.atlassian.confluence:atlassian-embedded-crowd-atlassian-user:jar:7.4.0:provided

[INFO] | +- com.atlassian.crowd:embedded-crowd-core:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.crowd:crowd-remote:jar:2.10.5-j11-3:provided

[INFO] | | - com.atlassian.crowd:crowd-integration-client-rest:jar:2.10.5-j11-3:provided

[INFO] | | - org.apache.httpcomponents:httpclient-cache:jar:4.5.1:provided

[INFO] | +- com.atlassian.crowd:crowd-query-language:jar:2.10.5-j11-3:provided

[INFO] | | - org.antlr:antlr-runtime:jar:3.5.2:provided

[INFO] | +- com.atlassian.crowd:crowd-persistence:jar:2.10.5-j11-3:provided

[INFO] | +- com.atlassian.healthcheck:atlassian-healthcheck-plugin-check-api:jar:6.0.0:provided

[INFO] | +- com.atlassian.healthcheck:atlassian-healthcheck-spi:jar:6.0.0:provided

[INFO] | +- org.springframework.ldap:spring-ldap-core:jar:2.3.2.RELEASE:provided

[INFO] | | +- org.springframework:spring-core:jar:4.3.4.RELEASE:provided

[INFO] | | - org.springframework:spring-tx:jar:4.3.4.RELEASE:provided

[INFO] | +- com.atlassian.confluence:confluence-upgrade:jar:7.4.0:provided

[INFO] | | +- com.atlassian.plugins:atlassian-plugins-api:jar:5.3.6:provided

[INFO] | | +- org.checkerframework:checker-qual:jar:2.8.1:provided

[INFO] | | - com.google.errorprone:error_prone_annotations:jar:2.3.4:provided

[INFO] | +- com.atlassian.confluence.compat:confluence-compat-lib:jar:1.0.0:provided

[INFO] | +- com.atlassian.integration.jira:jira-integration-spi:jar:6.2.4:provided

[INFO] | +- com.atlassian.gzipfilter:atlassian-gzipfilter:jar:3.0.0:provided

[INFO] | | - com.atlassian.gzipfilter:atlassian-flushable-gzipoutputstream:jar:1.1:provided

[INFO] | +- com.atlassian.analytics:analytics-api:jar:5.6.0:provided

[INFO] | +- com.atlassian.applinks:applinks-api:jar:6.0.12:provided

[INFO] | +- com.atlassian.applinks:applinks-spi:jar:6.0.12:provided

[INFO] | +- com.atlassian.applinks:applinks-host:jar:6.0.12:provided

[INFO] | +- com.atlassian.cluster.monitoring:cluster-monitoring-spi:jar:3.0.2:provided

[INFO] | +- com.atlassian.dragonfly:dragonfly-api:jar:1.1:provided

[INFO] | +- com.atlassian.dragonfly:dragonfly-spi:jar:1.1:provided

[INFO] | +- com.atlassian.dragonfly:dragonfly-core:jar:1.1:provided

[INFO] | +- com.atlassian.util.concurrent:atlassian-util-concurrent:jar:3.0.0:provided

[INFO] | +- io.atlassian.util.concurrent:atlassian-util-concurrent:jar:4.0.1:provided

[INFO] | +- com.atlassian.modzdetector:modz-detector:jar:0.14:provided

[INFO] | +- com.atlassian.mail:atlassian-mail:jar:5.0.1:provided

[INFO] | | +- commons-logging:commons-logging:jar:1.0.4:provided

[INFO] | | +- javax.mail:javax.mail-api:jar:1.5.6:provided

[INFO] | | - com.atlassian:atlassian-localhost:jar:1.1.0:provided

[INFO] | +- com.atlassian.velocity:atlassian-velocity:jar:1.3:provided

[INFO] | +- com.atlassian.core:atlassian-core:jar:7.0.1:provided

[INFO] | | - com.atlassian.image:atlassian-image-consumer:jar:1.0.1:provided

[INFO] | +- com.atlassian.core:atlassian-core-thumbnail:jar:7.0.1:provided

[INFO] | | +- com.twelvemonkeys.imageio:imageio-jpeg:jar:3.4.1:provided

[INFO] | | | - com.twelvemonkeys.imageio:imageio-metadata:jar:3.4.1:provided

[INFO] | | - com.twelvemonkeys.imageio:imageio-tiff:jar:3.4.1:provided

[INFO] | +- com.atlassian.core:atlassian-core-user:jar:7.0.1:provided

[INFO] | +- com.atlassian.config:atlassian-config:jar:1.0.1:provided

[INFO] | +- com.twelvemonkeys.imageio:imageio-bmp:jar:3.4.1:provided

[INFO] | | +- com.twelvemonkeys.imageio:imageio-core:jar:3.4.1:provided

[INFO] | | +- com.twelvemonkeys.common:common-lang:jar:3.4.1:provided

[INFO] | | +- com.twelvemonkeys.common:common-io:jar:3.4.1:provided

[INFO] | | - com.twelvemonkeys.common:common-image:jar:3.4.1:provided

[INFO] | +- com.twelvemonkeys.imageio:imageio-icns:jar:3.4.1:provided

[INFO] | +- com.atlassian.spring:atlassian-spring:jar:2.0.8:provided

[INFO] | | +- org.springframework:spring-jdbc:jar:2.0.6:provided

[INFO] | | | - org.springframework:spring-dao:jar:2.0.6:provided

[INFO] | | +- org.springframework:spring-context:jar:2.0.6:provided

[INFO] | | | - aopalliance:aopalliance:jar:1.0:provided

[INFO] | | - org.springframework:spring-web:jar:2.0.6:provided

[INFO] | +- com.atlassian.spring:atlassian-spring-hibernate2:jar:2.0.8:provided

[INFO] | | - org.springframework:spring-hibernate2:jar:2.0.6:provided

[INFO] | +- com.atlassian.event:atlassian-event:jar:4.0.1:provided

[INFO] | +- com.atlassian.confluence:confluence-bucket:jar:7.4.0:provided

[INFO] | +- com.atlassian.hibernate:atlassian-hibernate2-extras:jar:6.2.5:provided

[INFO] | +- com.atlassian.xwork:atlassian-xwork-10:jar:2.1.0:provided

[INFO] | +- com.atlassian.xwork:atlassian-xwork-core:jar:2.1.0:provided

[INFO] | +- com.atlassian.profiling:atlassian-profiling:jar:3.4.3:provided

[INFO] | +- com.atlassian.profiling:atlassian-profiling-dropwizard-metrics:jar:3.4.3:provided

[INFO] | | - io.dropwizard.metrics:metrics-core:jar:4.0.3:provided

[INFO] | +- com.atlassian.profiling:atlassian-profiling-micrometer:jar:3.4.3:provided

[INFO] | | - io.micrometer:micrometer-core:jar:1.2.0:provided

[INFO] | | +- org.hdrhistogram:HdrHistogram:jar:2.1.11:provided

[INFO] | | - org.latencyutils:LatencyUtils:jar:2.0.3:provided

[INFO] | +- io.dropwizard.metrics:metrics-jmx:jar:4.0.6:provided

[INFO] | +- io.micrometer:micrometer-registry-influx:jar:1.1.5:provided

[INFO] | +- com.atlassian.threadlocal:atlassian-threadlocal:jar:1.4:provided

[INFO] | +- com.atlassian.trackback:atlassian-trackback:jar:0.10:provided

[INFO] | +- com.atlassian.extras:atlassian-extras-core:jar:3.4.1:provided

[INFO] | | +- com.atlassian.extras:atlassian-extras-api:jar:3.4.1:provided

[INFO] | | +- com.atlassian.extras:atlassian-extras-common:jar:3.4.1:provided

[INFO] | | +- com.atlassian.extras:atlassian-extras-legacy:jar:3.4.1:provided

[INFO] | | | - com.atlassian.extras:atlassian-extras-decoder-api:jar:3.4.1:provided

[INFO] | | - com.atlassian.extras:atlassian-extras-decoder-v2:jar:3.4.1:provided

[INFO] | +- com.atlassian.ip:atlassian-ip:jar:3.1:provided

[INFO] | +- com.atlassian.johnson:atlassian-johnson-core:jar:4.0.0:provided

[INFO] | +- com.atlassian.johnson:atlassian-johnson-plugins:jar:4.0.0:provided

[INFO] | +- com.atlassian.html:atlassian-html-encoder:jar:1.5:provided

[INFO] | +- com.atlassian.json:atlassian-json-jsonorg:jar:0.11:provided

[INFO] | | - com.atlassian.json:atlassian-json-api:jar:0.11:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-core:jar:5.3.6:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-servlet:jar:5.3.6:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-webresource-common:jar:5.3.6:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-webfragment-api:jar:5.0.0:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-webfragment:jar:5.0.0:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-webresource:jar:4.1.2:provided

[INFO] | | +- com.atlassian.plugins:atlassian-plugins-webresource-spi:jar:4.1.2:provided

[INFO] | | +- com.atlassian.plugins:atlassian-plugins-webresource-api:jar:4.1.2:provided

[INFO] | | - com.atlassian.sourcemap:sourcemap:jar:1.7.6:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-osgi:jar:5.3.6:provided

[INFO] | | +- com.atlassian.plugins:atlassian-plugins-osgi-events:jar:5.3.6:provided

[INFO] | | +- biz.aQute.bnd:biz.aQute.bndlib:jar:3.5.0:provided

[INFO] | | +- org.apache.felix:org.apache.felix.framework:jar:5.6.12:provided

[INFO] | | +- io.github.lukehutch:fast-classpath-scanner:jar:2.18.1:provided

[INFO] | | - org.twdata.pkgscanner:package-scanner:jar:0.9.5:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-schema:jar:5.3.6:provided

[INFO] | +- com.atlassian.plugins:atlassian-plugins-spring:jar:5.3.6:provided

[INFO] | | +- org.springframework:spring-expression:jar:5.0.10.RELEASE:provided

[INFO] | | +- org.springframework:spring-aop:jar:5.0.10.RELEASE:provided

[INFO] | | +- org.springframework:spring-context-support:jar:5.0.10.RELEASE:provided

[INFO] | | - org.springframework:spring-webmvc:jar:5.0.10.RELEASE:provided

[INFO] | +- com.atlassian.plugins:atlassian-spring-interceptor-adapter-spi:jar:1.1:provided

[INFO] | +- com.atlassian.bandana:atlassian-bandana:jar:3.1:provided

[INFO] | +- com.atlassian.user:atlassian-user:jar:3.0:provided

[INFO] | +- com.atlassian.renderer:atlassian-renderer-legacy:jar:6.2.25:provided

[INFO] | | - javax.activation:activation:jar:1.0.2:provided

[INFO] | +- com.atlassian.webhooks:atlassian-webhooks-api:jar:6.1.0:provided

[INFO] | +- com.atlassian.webhooks:atlassian-webhooks-spi:jar:6.1.0:provided

[INFO] | +- net.sourceforge.nekohtml:nekohtml:jar:1.9.22:provided

[INFO] | +- com.atlassian.bonnie:atlassian-bonnie:jar:7.0.2:provided

[INFO] | | +- com.atlassian.bonnie:lucene-upgrader:jar:lucene36:1.0:provided

[INFO] | | +- org.apache.pdfbox:pdfbox:jar:2.0.6:provided

[INFO] | | | - org.apache.pdfbox:fontbox:jar:2.0.6:provided

[INFO] | | - com.ibm.icu:icu4j:jar:3.8:provided

[INFO] | +- org.bouncycastle:bcprov-jdk15on:jar:1.64:provided

[INFO] | +- org.bouncycastle:bcmail-jdk15on:jar:1.64:provided

[INFO] | | - org.bouncycastle:bcpkix-jdk15on:jar:1.64:provided

[INFO] | +- com.atlassian.jdk.utilities:atlassian-jdk-utilities:jar:0.6:provided

[INFO] | +- joda-time:joda-time:jar:2.9.9:provided

[INFO] | +- com.atlassian.seraph:atlassian-seraph:jar:4.0.4:provided

[INFO] | | - com.atlassian.security:atlassian-secure-utils:jar:3.2.11:provided

[INFO] | +- com.atlassian.security.auth.trustedapps:atlassian-trusted-apps-core:jar:5.0.1:provided

[INFO] | +- com.atlassian.security.auth.trustedapps:atlassian-trusted-apps-seraph-integration:jar:5.0.1:provided

[INFO] | +- com.atlassian.plugins:avatar-plugin-api:jar:1.3.5:provided

[INFO] | +- log4j:log4j:jar:1.2.17:provided

[INFO] | +- org.slf4j:slf4j-api:jar:1.7.25:provided

[INFO] | +- org.slf4j:jul-to-slf4j:jar:1.7.25:provided

[INFO] | +- org.slf4j:jcl-over-slf4j:jar:1.7.25:provided

[INFO] | +- commons-beanutils:commons-beanutils:jar:1.9.4:provided

[INFO] | +- commons-codec:commons-codec:jar:1.12:provided

[INFO] | +- commons-collections:commons-collections:jar:3.2.2:provided

[INFO] | +- org.apache.commons:commons-collections4:jar:4.3:provided

[INFO] | +- org.apache.commons:commons-compress:jar:1.19:provided

[INFO] | +- commons-digester:commons-digester:jar:1.5:provided

[INFO] | +- commons-discovery:commons-discovery:jar:0.5:provided

[INFO] | +- commons-fileupload:commons-fileupload:jar:1.4:provided

[INFO] | +- commons-io:commons-io:jar:2.6:provided

[INFO] | +- commons-lang:commons-lang:jar:2.6:provided

[INFO] | +- org.apache.commons:commons-lang3:jar:3.9:provided

[INFO] | +- org.apache.commons:commons-math3:jar:3.6.1:provided

[INFO] | +- commons-pool:commons-pool:jar:1.6:provided

[INFO] | +- org.apache.commons:commons-pool2:jar:2.6.2:provided

[INFO] | +- commons-validator:commons-validator:jar:1.5.1:provided

[INFO] | +- net.sf.supercsv:super-csv:jar:2.1.0:provided

[INFO] | +- hibernate:hibernate:jar:2.1.8-atlassian-34:provided

[INFO] | +- org.hibernate:hibernate-core:jar:5.2.8.Final:provided

[INFO] | | +- org.jboss.logging:jboss-logging:jar:3.3.0.Final:provided

[INFO] | | +- org.hibernate.javax.persistence:hibernate-jpa-2.1-api:jar:1.0.0.Final:provided

[INFO] | | +- org.javassist:javassist:jar:3.20.0-GA:provided

[INFO] | | +- antlr:antlr:jar:2.7.7:provided

[INFO] | | +- org.jboss:jandex:jar:2.0.3.Final:provided

[INFO] | | +- com.fasterxml:classmate:jar:1.3.0:provided

[INFO] | | - org.hibernate.common:hibernate-commons-annotations:jar:5.0.1.Final:provided

[INFO] | +- org.hibernate:hibernate-c3p0:jar:5.2.8.Final:provided

[INFO] | +- com.atlassian.hibernate:hibernate.adapter:jar:1.0.3:provided

[INFO] | | +- org.hibernate:hibernate-envers:jar:5.2.2.Final:provided

[INFO] | | - org.jboss.logging:jboss-logging-annotations:jar:2.0.0.Final:provided

[INFO] | +- cglib:cglib:jar:3.2.12:provided

[INFO] | | - org.ow2.asm:asm:jar:7.1:provided

[INFO] | +- org.apache.ant:ant:jar:1.10.7:provided

[INFO] | | - org.apache.ant:ant-launcher:jar:1.10.7:provided

[INFO] | +- dom4j:dom4j:jar:1.6.1-atlassian-2:provided

[INFO] | +- jaxen:jaxen:jar:1.1.6:provided

[INFO] | +- odmg:odmg:jar:3.0:provided

[INFO] | +- com.mchange:c3p0:jar:0.9.5.4:provided

[INFO] | | - com.mchange:mchange-commons-java:jar:0.2.15:provided

[INFO] | +- javax.transaction:javax.transaction-api:jar:1.2:provided

[INFO] | +- com.sun:jai_core:jar:1.1.3:provided

[INFO] | +- com.sun:jai_codec:jar:1.1.3:provided

[INFO] | +- opensymphony:webwork:jar:2.1.5-atlassian-3:provided

[INFO] | +- opensymphony:xwork:jar:1.0.3.6:provided

[INFO] | +- ognl:ognl:jar:2.6.5-atlassian-3:provided

[INFO] | +- opensymphony:oscore:jar:2.2.7-atlassian-1:provided

[INFO] | +- oscache:oscache:jar:2.2:provided

[INFO] | +- osuser:osuser:jar:atl.user:provided

[INFO] | +- opensymphony:propertyset:jar:1.3-21Nov03:provided

[INFO] | +- org.apache.velocity:velocity:jar:1.6.4-atlassian-19:provided

[INFO] | | - org.apache.commons:commons-text:jar:1.6:provided

[INFO] | +- com.atlassian.soy:soy-template-renderer-api:jar:5.0.0:provided

[INFO] | +- com.atlassian.soy:soy-template-renderer-plugin-api:jar:5.0.0:provided

[INFO] | +- com.sun.activation:javax.activation:jar:1.2.0:provided

[INFO] | +- javax.annotation:javax.annotation-api:jar:1.3.2:provided

[INFO] | +- javax.xml.bind:jaxb-api:jar:2.3.1:provided

[INFO] | | - javax.activation:javax.activation-api:jar:1.2.0:provided

[INFO] | +- org.glassfish.jaxb:jaxb-runtime:jar:2.3.1:provided

[INFO] | | +- org.glassfish.jaxb:txw2:jar:2.3.1:provided

[INFO] | | +- com.sun.istack:istack-commons-runtime:jar:3.0.7:provided

[INFO] | | +- org.jvnet.staxex:stax-ex:jar:1.8:provided

[INFO] | | - com.sun.xml.fastinfoset:FastInfoset:jar:1.2.15:provided

[INFO] | +- org.glassfish:javax.json:jar:1.1.4:provided

[INFO] | +- javax.xml.ws:jaxws-api:jar:2.3.1:provided

[INFO] | | - javax.xml.soap:javax.xml.soap-api:jar:1.4.0:provided

[INFO] | +- com.sun.xml.ws:jaxws-rt:jar:2.3.1:provided

[INFO] | | +- javax.jws:javax.jws-api:jar:1.1:provided

[INFO] | | +- com.sun.xml.ws:policy:jar:2.7.5:provided

[INFO] | | +- org.glassfish.gmbal:gmbal-api-only:jar:3.1.0-b001:provided

[INFO] | | | - org.glassfish.external:management-api:jar:3.0.0-b012:provided

[INFO] | | +- com.sun.xml.stream.buffer:streambuffer:jar:1.5.6:provided

[INFO] | | +- org.glassfish.ha:ha-api:jar:3.1.9:provided

[INFO] | | - com.sun.xml.messaging.saaj:saaj-impl:jar:1.5.0:provided

[INFO] | +- com.sun.mail:javax.mail:jar:1.6.2:provided

[INFO] | +- javax.validation:validation-api:jar:2.0.1.Final:provided

[INFO] | +- org.hibernate.validator:hibernate-validator:jar:6.0.17.Final:provided

[INFO] | +- com.atlassian.spring:spring-quartz1:jar:0.1.0:provided

[INFO] | +- org.aspectj:aspectjweaver:jar:1.9.4:provided

[INFO] | +- opensymphony:sitemesh:jar:2.5-atlassian-6:provided

[INFO] | +- velocity-tools:velocity-tools:jar:1.4:provided

[INFO] | +- radeox:radeox:jar:1.0b2-forked-22Apr2004:provided

[INFO] | +- org.apache.lucene:lucene-core:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-analyzers-common:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-analyzers-kuromoji:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-analyzers-stempel:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-misc:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-highlighter:jar:4.4.0-atlassian-02:provided

[INFO] | | +- org.apache.lucene:lucene-memory:jar:4.4.0-atlassian-02:provided

[INFO] | | - org.apache.lucene:lucene-queries:jar:4.4.0-atlassian-02:provided

[INFO] | +- org.apache.lucene:lucene-queryparser:jar:4.4.0-atlassian-02:provided

[INFO] | | - org.apache.lucene:lucene-sandbox:jar:4.4.0-atlassian-02:provided

[INFO] | | - jakarta-regexp:jakarta-regexp:jar:1.4:provided

[INFO] | +- org.apache.pdfbox:xmpbox:jar:2.0.16:provided

[INFO] | +- org.hibernate:jtidy:jar:r8-20060801:provided

[INFO] | +- org.quartz-scheduler:quartz:jar:1.8.6:provided

[INFO] | +- com.atlassian.scheduler:atlassian-scheduler-api:jar:3.0.0:provided

[INFO] | +- com.atlassian.scheduler:atlassian-scheduler-core:jar:3.0.0:provided

[INFO] | +- com.atlassian.scheduler.caesium:atlassian-scheduler-caesium:jar:3.0.0:provided

[INFO] | +- org.hsqldb:hsqldb:jar:2.3.0:provided

[INFO] | +- com.h2database:h2:jar:1.4.196:provided

[INFO] | +- com.atlassian.hsqldb:atlassian-hsqdlb-server-integration:jar:1.1.0:provided

[INFO] | +- com.atlassian.h2:atlassian-h2-server-integration:jar:2.1.0:provided

[INFO] | +- org.postgresql:postgresql:jar:42.2.8:provided

[INFO] | +- com.microsoft.sqlserver:mssql-jdbc:jar:6.3.0.jre8-preview:provided

[INFO] | +- net.sourceforge.jtds:jtds:jar:1.3.1:provided

[INFO] | +- rome:rome:jar:1.0:provided

[INFO] | +- org.jdom:jdom:jar:1.1.3:provided

[INFO] | +- commons-jrcs:commons-jrcs:jar:diff-0.1.7:provided

[INFO] | +- commons-httpclient:commons-httpclient:jar:3.1-atlassian-2:provided

[INFO] | +- xerces:xercesImpl:jar:2.12.0:provided

[INFO] | +- xmlrpc:xmlrpc:jar:2.0+xmlrpc61.1+sbfix:provided

[INFO] | +- com.atlassian.xmlrpc:xmlrpc-supplementary-character-support:jar:0.2:provided

[INFO] | +- oro:oro:jar:2.0.8:provided

[INFO] | +- com.thoughtworks.xstream:xstream:jar:1.1.1:provided

[INFO] | | - xpp3:xpp3_min:jar:1.1.3.4.O:provided

[INFO] | +- xalan:xalan:jar:2.7.2:provided

[INFO] | | - xalan:serializer:jar:2.7.2:provided

[INFO] | +- xml-apis:xml-apis:jar:1.4.01:provided

[INFO] | +- xml-apis:xml-apis-ext:jar:1.3.04:provided

[INFO] | +- org.codehaus.woodstox:wstx-asl:jar:3.2.9-atlassian-1:provided

[INFO] | +- io.leopard.thirdparty:jcaptcha-api:jar:2.0.0:provided

[INFO] | +- io.leopard.thirdparty:jcaptcha-core:jar:2.0.0:provided

[INFO] | | - com.jhlabs:filters:jar:2.0.235:provided

[INFO] | +- org.tuckey:urlrewritefilter:jar:4.0.4:provided

[INFO] | +- wsdl4j:wsdl4j:jar:1.6.3:provided

[INFO] | +- com.google.code.findbugs:jsr305:jar:3.0.2:provided

[INFO] | +- net.javacrumbs.future-converter:future-converter-java8-guava:jar:1.2.0:provided

[INFO] | | +- net.javacrumbs.future-converter:future-converter-common:jar:1.2.0:provided

[INFO] | | +- net.javacrumbs.future-converter:future-converter-java8-common:jar:1.2.0:provided

[INFO] | | - net.javacrumbs.future-converter:future-converter-guava-common:jar:1.2.0:provided

[INFO] | +- net.jcip:jcip-annotations:jar:1.0:provided

[INFO] | +- com.atlassian.vcache:atlassian-vcache-api:jar:1.12.0:provided

[INFO] | | - com.atlassian.marshalling:atlassian-marshalling-api:jar:1.0.0:provided

[INFO] | +- com.atlassian.vcache:atlassian-vcache-internal-legacy:jar:1.12.0:provided

[INFO] | | - com.atlassian.vcache:atlassian-vcache-internal-core:jar:1.12.0:provided

[INFO] | | - com.atlassian.vcache:atlassian-vcache-internal-api:jar:1.12.0:provided

[INFO] | +- com.atlassian.marshalling:atlassian-marshalling-gson:jar:3.0.1:provided

[INFO] | +- com.atlassian.marshalling:atlassian-marshalling-jdk:jar:1.1.0:provided

[INFO] | +- com.atlassian.marshalling:atlassian-marshalling-protobuf:jar:1.0.0:provided

[INFO] | +- com.atlassian.cache:atlassian-cache-api:jar:5.1.1:provided

[INFO] | +- com.atlassian.cache:atlassian-cache-memory:jar:5.1.1:provided

[INFO] | | - com.atlassian.cache:atlassian-cache-common-impl:jar:5.1.1:provided

[INFO] | +- com.atlassian.beehive:beehive-api:jar:2.0.0:provided

[INFO] | +- com.atlassian.sal:sal-spi:jar:4.0.0:provided

[INFO] | +- com.atlassian.sal:sal-spring:jar:4.0.0:provided

[INFO] | +- com.atlassian.sal:sal-core:jar:4.0.0:provided

[INFO] | | +- org.apache.httpcomponents:httpmime:jar:4.5.5:provided

[INFO] | | - org.hamcrest:hamcrest-library:jar:1.3:provided

[INFO] | +- com.atlassian.sal:sal-api:jar:4.0.0:provided

[INFO] | +- com.atlassian.sal:sal-trust-api:jar:4.0.0:provided

[INFO] | +- com.atlassian.confluence:confluence-java-api:jar:7.4.0:provided

[INFO] | | - com.atlassian.graphql:atlassian-graphql-annotations:jar:1.3.7:provided

[INFO] | +- com.atlassian.confluence:confluence-rest-api:jar:7.4.0:provided

[INFO] | +- com.atlassian.confluence:confluence-rest-serialization:jar:7.4.0:provided

[INFO] | +- org.codehaus.jackson:jackson-core-asl:jar:1.9.13-atlassian-4:provided

[INFO] | +- org.codehaus.jackson:jackson-mapper-asl:jar:1.9.13-atlassian-4:provided

[INFO] | +- com.fasterxml.jackson.core:jackson-annotations:jar:2.10.1:provided

[INFO] | +- com.fasterxml.jackson.core:jackson-core:jar:2.10.1:provided

[INFO] | +- com.fasterxml.jackson.core:jackson-databind:jar:2.10.1:provided

[INFO] | +- com.fasterxml.jackson.datatype:jackson-datatype-joda:jar:2.10.1:provided

[INFO] | +- com.atlassian.activeobjects:activeobjects-dbex:jar:3.2.2:provided

[INFO] | | - com.atlassian.activeobjects:activeobjects-spi:jar:3.2.2:provided

[INFO] | +- org.owasp.antisamy:antisamy:jar:1.5.3-atlassian-7:provided

[INFO] | +- org.apache.xmlgraphics:batik-codec:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-awt-util:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-bridge:jar:1.11:provided

[INFO] | | | +- org.apache.xmlgraphics:batik-parser:jar:1.11:provided

[INFO] | | | +- org.apache.xmlgraphics:batik-script:jar:1.11:provided

[INFO] | | | - org.apache.xmlgraphics:batik-svg-dom:jar:1.11:provided

[INFO] | | - org.apache.xmlgraphics:batik-util:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-constants:jar:1.11:provided

[INFO] | | - org.apache.xmlgraphics:batik-i18n:jar:1.11:provided

[INFO] | +- org.apache.xmlgraphics:batik-css:jar:1.11:provided

[INFO] | | - org.apache.xmlgraphics:xmlgraphics-commons:jar:2.3:provided

[INFO] | +- org.apache.xmlgraphics:batik-ext:jar:1.11:provided

[INFO] | +- org.apache.xmlgraphics:batik-transcoder:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-anim:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-dom:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-gvt:jar:1.11:provided

[INFO] | | +- org.apache.xmlgraphics:batik-svggen:jar:1.11:provided

[INFO] | | - org.apache.xmlgraphics:batik-xml:jar:1.11:provided

[INFO] | +- org.outerj.daisy:daisydiff:jar:1.1.14-atlassian-hosted:provided

[INFO] | | - org.eclipse.core:runtime:jar:20070801:provided

[INFO] | +- com.atlassian.velocity.htmlsafe:velocity-htmlsafe:jar:3.1.0:provided

[INFO] | +- com.atlassian.botocss:botocss-core:jar:6.3:provided

[INFO] | | +- org.jsoup:jsoup:jar:1.8.3:provided

[INFO] | | - net.sf.cssbox:jstyleparser:jar:1.16-atlassian-1:provided

[INFO] | +- com.google.guava:guava:jar:26.0-jre:provided

[INFO] | | +- com.google.j2objc:j2objc-annotations:jar:1.1:provided

[INFO] | | - org.codehaus.mojo:animal-sniffer-annotations:jar:1.14:provided

[INFO] | +- com.atlassian.fugue:fugue:jar:2.7.0:provided

[INFO] | +- io.atlassian.fugue:fugue:jar:4.7.2:provided

[INFO] | +- io.atlassian.fugue:fugue-deprecated:jar:4.7.2:provided

[INFO] | +- io.atlassian.fugue:fugue-guava:jar:4.7.2:provided

[INFO] | +- io.atlassian.fugue:fugue-optics:jar:4.7.2:provided

[INFO] | +- io.atlassian.fugue:fugue-retry:jar:4.7.2:provided

[INFO] | +- com.atlassian.http:atlassian-http:jar:2.0.7:provided

[INFO] | | - org.apache.tika:tika-core:jar:1.22:provided

[INFO] | +- com.atlassian.instrumentation:atlassian-instrumentation-core:jar:3.0.0:provided

[INFO] | +- com.github.kristofa:brave-web-servlet-filter:jar:3.0.0:provided

[INFO] | | - com.github.kristofa:brave-http:jar:3.0.0:provided

[INFO] | | - com.github.kristofa:brave-core:jar:3.0.0:provided

[INFO] | | - org.apache.thrift:libthrift:jar:0.9.0:provided

[INFO] | +- com.github.kristofa:brave-apache-http-interceptors:jar:3.0.0:provided

[INFO] | +- io.atlassian.zipkin:atlassian-brave-spancollector-core:jar:1.0.0:provided

[INFO] | +- com.atlassian.tenancy:atlassian-tenancy-api:jar:3.0.1:provided

[INFO] | +- com.atlassian.ozymandias:atlassian-plugin-point-safety:jar:1.0.0:provided

[INFO] | +- com.github.gquintana.metrics:metrics-sql:jar:3.1.0-atlassian-4:provided

[INFO] | +- com.github.oshi:oshi-core:jar:3.13.3:provided

[INFO] | | +- net.java.dev.jna:jna:jar:5.3.1:provided

[INFO] | | - net.java.dev.jna:jna-platform:jar:5.3.1:provided

[INFO] | +- com.atlassian.confluence.plugins:confluence-extractor-api-plugin:jar:2.0.8:provided

[INFO] | +- com.atlassian.plugins:atlassian-whitelist-api-plugin:jar:4.0.7:provided

[INFO] | +- com.atlassian.diagnostics:atlassian-diagnostics-api:jar:1.1.10:provided

[INFO] | +- com.atlassian.diagnostics:atlassian-diagnostics-core:jar:1.1.10:provided

[INFO] | +- com.atlassian.diagnostics:atlassian-diagnostics-platform:jar:1.1.10:provided

[INFO] | +- com.atlassian.audit:atlassian-audit-api:jar:1.0.0:provided

[INFO] | - com.atlassian.audit:atlassian-audit-core:jar:1.0.0:provided

[INFO] +- com.atlassian.mywork:mywork-api:jar:1.0.2:provided

[INFO] +- com.atlassian.plugin:atlassian-spring-scanner-annotation:jar:1.2.13:compile

[INFO] +- com.atlassian.plugin:atlassian-spring-scanner-runtime:jar:1.2.13:runtime

[INFO] +- javax.inject:javax.inject:jar:1:provided

[INFO] +- org.slf4j:slf4j-simple:jar:2.0.0-alpha1:test

[INFO] +- com.atlassian.plugins:atlassian-plugins-osgi-testrunner:jar:2.0.1:test

[INFO] | +- org.apache.wink:wink-client:jar:1.1.3-incubating:test

[INFO] | | +- org.apache.wink:wink-common:jar:1.1.3-incubating:test

[INFO] | | | - org.apache.geronimo.specs:geronimo-annotation_1.1_spec:jar:1.0:test

[INFO] | | - com.sun.xml.bind:jaxb-impl:jar:2.2.1.1:test

[INFO] | - com.atlassian.upm:upm-api:jar:2.15:test

[INFO] +- javax.ws.rs:jsr311-api:jar:1.1.1:provided

[INFO] +- com.google.code.gson:gson:jar:2.2.2-atlassian-1:compile

[INFO] - org.mockito:mockito-all:jar:1.9.0:test

— Reply to this email directly, view it on GitHubhttps://github.com/baloise/digital-signature/issues/81#issuecomment-998833690, or unsubscribehttps://github.com/notifications/unsubscribe-auth/APUPFJWCQO5XKQXNSQ4C3ILUSCGZTANCNFSM5KNMRG7Q. Triage notifications on the go with GitHub Mobile for iOShttps://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Androidhttps://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub. You are receiving this because you authored the thread.Message ID: @.***>