[jira] [Created] (CURATOR-631) Upgrade Jersey to 2.35 or later and upgrade resteasy-jaxrs to a newer and compatible version

["Dóra Horváth (Jira)" <ji...@apache.org>]

Dóra Horváth created CURATOR-631:
------------------------------------

             Summary: Upgrade Jersey to 2.35 or later and upgrade resteasy-jaxrs to a newer and compatible version
                 Key: CURATOR-631
                 URL: https://issues.apache.org/jira/browse/CURATOR-631
             Project: Apache Curator
          Issue Type: Task
            Reporter: Dóra Horváth
            Assignee: Jordan Zimmerman


Curator is pulling in resteasy-jaxrs 2.3.5 which is affected by multiple CVEs inlcuding CVE-2016-9606 and CVE-2014-3490. 

2.3.5 is also deprecated and needs to be upgraded. 

Curator is also pulling jersey 1.19.4 which is an old version and needs to be upgraded to 2.35 or later (3.0.4).

resteasy-jaxrs dependency cannot be higher than 2.x for compatibility with Jersey 1.x, this is why they need to be upgraded together.

 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)