Re: Any Xerces-J 2.12.0 release date to address CVE-2012-0881?

Alright, in that case, how do I go about getting an Apache CLA on file with my employer being involved?

-Will

> On Jan 15, 2018, at 4:45 PM, Cantor, Scott <[email protected]> wrote:
> 
> On 1/15/18, 5:41 PM, "Will Herrmann" <[email protected]> wrote:
> 
>> It’s necessary to get my employer on file even if I’m not doing it on company time?
> 
> That depends on the jurisdiction, I couldn't answer that for you. Most US states are, I think, work for hire, meaning your employer owns anything you do that is remotely related to your work, regardless of whether you do it on their time. Yes, really. Ohio is, for example, so my employer owns essentially everything I do, and I do my Apache work under a contract with a third party that stipulates that the third party can license what I do for them. So the CLA was signed by that third party. I cannot do one myself, because I'd be lying.
> 
>> Also, in my case, I both have an employer and am self-employed (side job). How does that work?
> 
> Doesn't change the essential issue of whether your employer gets a say.
> 
> -- Scott
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]