abdera-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David Jarrin (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (ABDERA-437) Is there release plan for Abdera 1.2?
Date Tue, 28 Jun 2016 15:58:57 GMT

    [ https://issues.apache.org/jira/browse/ABDERA-437?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15353274#comment-15353274

David Jarrin commented on ABDERA-437:

A critical security issue has been uncovered in the old commons-httpclient library. Please
read here:


Any support for  commons-httpclient was stopped as of 2007 so there is no hope that the security
issue will be fixed on that code base. The new HttpComponents does not have this security
It would be extremely helpful (and urgent in my opinion) for Abdera development to provide
a version that works with the new HttpComponents library. Please consider prioritizing this
important update.

> Is there release plan for Abdera 1.2?
> -------------------------------------
>                 Key: ABDERA-437
>                 URL: https://issues.apache.org/jira/browse/ABDERA-437
>             Project: Abdera
>          Issue Type: Question
>            Reporter: perry he
>            Priority: Critical
> Abdera 1.1.3 was released on year of 2012, is it being maintained now? any plan for 1.2?
> Abdera 1.1.3 uses commons-httpclient-3.1.jar in released package, but seems commons-httpclient
is replaced by Apache HttpComponents(http://hc.apache.org/httpclient-legacy/index.html), does
this mean we should drop  commons-httpclient as client in future? Will latest version of HttpComponents
be included in Abdera 1.2?

This message was sent by Atlassian JIRA

View raw message