Re: [eclipse-dev] JUnit bundled with Eclipse 4.6.3

[Александър Куртаков <akurtakov@xxxxxxxxx>]

On Fri, Feb 4, 2022 at 12:06 PM Rohit M Pujar1 <Rohit.Pujar@xxxxxxxxxx> wrote:

Team,

 

While running Whitesource scanning on eclipse 4.6.3 version, encountered the vulnerability CVE-2020-15250: junit-4.12.jar (Upgrade to version junit4.13.1).

I have attempted to remove the bundled plugins *.junit.* from eclipse plugins and could successfully launch the eclipse application without any loss of functionality but the console displays too many missing dependencies in the log file (attached RemoveJUnit_Eclipse_Console_ErrorLog.txt). 

 

Can anybody let me know how to remove the JUnit dependencies from the eclipse and bundle other plugins?

Use https://download.eclipse.org/eclipse/downloads/drops4/R-4.22-202111241800/ it already has 4.13.2.

 

Thank You,

Kind Regards,
Rohit M Pujar,
IBM Software Labs, India BLR/MG2/5F-026
------------------------------------------
NOTES email : ropujar1@xxxxxxxxxx

SLACK id: rmpujar

_______________________________________________
eclipse-dev mailing list
eclipse-dev@xxxxxxxxxxx
To unsubscribe from this list, visit https://www.eclipse.org/mailman/listinfo/eclipse-dev