XStream 1.4.19 Vulnerabilities

[Joseph Angotti]

Hi,

I believe there are existing conversations about this topic, but when will version 1.5.x be released?

Our application uses KIE API version 7.73.0.Final, which depends on XStream 1.4.19, but it is vulnerable.

Thank you.

[Jörg Schaible]

On Monday, 21. November 2022, 20:40:02 CET Joseph Angotti wrote:
> Hi,
>
> I believe there are existing conversations about this topic, but when will
> version 1.5.x be released?

Can't say, I'm working on 1.4.20.

> Our application uses KIE API version 7.73.0.Final, which depends on XStream
> 1.4.19, but it is vulnerable.

Regards,
Jörg

[Joseph Angotti]

Jörg,

Thank you. Is there any ETA as to when XStream Version 1.4.20 will be released?

--
You received this message because you are subscribed to the Google Groups "XStream User" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xstream-user...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/xstream-user/6687817.edSRJqp2Aa%40floh.

[Jörg Schaible]

On Tuesday, 22. November 2022, 23:23:53 CET Joseph Angotti wrote:
> Jörg,
>
> Thank you. Is there any ETA as to when XStream Version 1.4.20 will be
> released?

No, it depends on my spare time.

Regards,
Jörg

[David Karr]

I'm going to interject on this, because I feel I should.

He has said in multiple threads that this will be done when it's done. He is doing this work, apparently by himself, during the spare time he has, which he is likely not being paid for. People continually asking him when this will be done is not useful.

If you want to do something worthwhile, ask your employer if they can support developers in your own company contributing to this project, which all of you apparently rely on, and get free benefit from. 

To view this discussion on the web visit https://groups.google.com/d/msgid/xstream-user/CAEeJx4iEyGsU7N6NC708_BaKdMmhb%2BnGp3gZdgbO3Dmh5ycMEg%40mail.gmail.com.