axis-java-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Miriam Celi (JIRA)" <>
Subject [jira] [Created] (AXIS2-5759) Upgrade HTTPCore and HTTPClient into latest versions
Date Wed, 13 Apr 2016 14:27:25 GMT
Miriam Celi created AXIS2-5759:

             Summary: Upgrade HTTPCore and HTTPClient into latest versions
                 Key: AXIS2-5759
             Project: Axis2
          Issue Type: Bug
          Components: transports
    Affects Versions: 1.7.1, 1.7.0
            Reporter: Miriam Celi

Axis2 1.7.0 and 1.7.1 ship with vulnerable versions of httpclient-4.2.1.jar and commons-httpclient-3.1.jar:

CVE-2014-3577 (affected products include Apache HttpClient 4.2.1):

CVE-2012-6153 (affected products include Apache HTTPclient 4.2.1 and Apache HttpClient 3.1):

Additional information on these vulnerabilities can be found at this link:

HTTPCore (httpcore-4.2.1.jar) could also be upgraded to the newer 4.4.4 GA version.

This message was sent by Atlassian JIRA

To unsubscribe, e-mail:
For additional commands, e-mail:

View raw message