chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Pavlin (JIRA)" <j...@apache.org>
Subject [jira] [Created] (CMIS-1077) need to update out-of-date dependencies with CVEs
Date Fri, 24 May 2019 14:26:00 GMT
Andrew Pavlin created CMIS-1077:
-----------------------------------

             Summary: need to update out-of-date dependencies with CVEs
                 Key: CMIS-1077
                 URL: https://issues.apache.org/jira/browse/CMIS-1077
             Project: Chemistry
          Issue Type: Bug
          Components: opencmis-client, opencmis-client-bindings, opencmis-commons
    Affects Versions: OpenCMIS 1.1.0
            Reporter: Andrew Pavlin


The last official build of Chemistry is badly out of date with regard to its dependencies.
Would it be possible to come out with a patch release that brings those dependencies up-to-date?
Specifically, for the sub-parts of Chemistry our project is using, the obsolete dependencies
are:

Apache Httpcomponents (using 4.2.6, currently 4.5)

com.squareup.okhttp3 (using 3.4.1, currently 3.13.1)

Apache CXF (using 3.0.12, currently 3.3.2)

org.osgi.core (using 5.0.0, currently 6.0.0)



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Mime
View raw message