chemistry-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Pavlin (JIRA)" <>
Subject [jira] [Created] (CMIS-1077) need to update out-of-date dependencies with CVEs
Date Fri, 24 May 2019 14:26:00 GMT
Andrew Pavlin created CMIS-1077:

             Summary: need to update out-of-date dependencies with CVEs
                 Key: CMIS-1077
             Project: Chemistry
          Issue Type: Bug
          Components: opencmis-client, opencmis-client-bindings, opencmis-commons
    Affects Versions: OpenCMIS 1.1.0
            Reporter: Andrew Pavlin

The last official build of Chemistry is badly out of date with regard to its dependencies.
Would it be possible to come out with a patch release that brings those dependencies up-to-date?
Specifically, for the sub-parts of Chemistry our project is using, the obsolete dependencies

Apache Httpcomponents (using 4.2.6, currently 4.5)

com.squareup.okhttp3 (using 3.4.1, currently 3.13.1)

Apache CXF (using 3.0.12, currently 3.3.2)

org.osgi.core (using 5.0.0, currently 6.0.0)

This message was sent by Atlassian JIRA

View raw message