You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@chemistry.apache.org by "Florian Müller (JIRA)" <ji...@apache.org> on 2019/05/24 14:31:00 UTC
[jira] [Commented] (CMIS-1077) need to update out-of-date
dependencies with CVEs
[ https://issues.apache.org/jira/browse/CMIS-1077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16847595#comment-16847595 ]
Florian Müller commented on CMIS-1077:
--------------------------------------
Please try 1.2.0-SNAPSHOT and report any issues. It should be up-to-date, but "just" needs to be released.
> need to update out-of-date dependencies with CVEs
> -------------------------------------------------
>
> Key: CMIS-1077
> URL: https://issues.apache.org/jira/browse/CMIS-1077
> Project: Chemistry
> Issue Type: Bug
> Components: opencmis-client, opencmis-client-bindings, opencmis-commons
> Affects Versions: OpenCMIS 1.1.0
> Reporter: Andrew Pavlin
> Priority: Major
>
> The last official build of Chemistry is badly out of date with regard to its dependencies. Would it be possible to come out with a patch release that brings those dependencies up-to-date? Specifically, for the sub-parts of Chemistry our project is using, the obsolete dependencies are:
> Apache Httpcomponents (using 4.2.6, currently 4.5)
> com.squareup.okhttp3 (using 3.4.1, currently 3.13.1)
> Apache CXF (using 3.0.12, currently 3.3.2)
> org.osgi.core (using 5.0.0, currently 6.0.0)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)