You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@felix.apache.org by "Shubham Kansal (Jira)" <ji...@apache.org> on 2021/06/03 09:38:00 UTC
[jira] [Updated] (FELIX-6421) Latest version(4.6.0) of
org.apache.felix.webconsole contains 1.4 version of commons-io
[ https://issues.apache.org/jira/browse/FELIX-6421?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Shubham Kansal updated FELIX-6421:
----------------------------------
Description: Currently my application is using org.apache.felix.webconsole-1.0.0.jar which vulnerable version: *1.1* of *Commons IO.* I want to upgrade commons-io to version 2.8, but the latest version org.apache.felix.webconsole-4.6.0.jar contains *1.4* version of commons-io jar. (was: Currently my application is using org.apache.felix.webconsole-1.0.0.jar which vulnerable version: *1.1* of *Commons IO.* I want to upgrade commons-io to version 2.8, but the latest version org.apache.felix.webconsole-4.6.0.jar contains 1.4 version of commons-io jar.)
> Latest version(4.6.0) of org.apache.felix.webconsole contains 1.4 version of commons-io
> ---------------------------------------------------------------------------------------
>
> Key: FELIX-6421
> URL: https://issues.apache.org/jira/browse/FELIX-6421
> Project: Felix
> Issue Type: Bug
> Reporter: Shubham Kansal
> Priority: Major
>
> Currently my application is using org.apache.felix.webconsole-1.0.0.jar which vulnerable version: *1.1* of *Commons IO.* I want to upgrade commons-io to version 2.8, but the latest version org.apache.felix.webconsole-4.6.0.jar contains *1.4* version of commons-io jar.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)