You are viewing a plain text version of this content. The canonical link for it is here.
Posted to java-dev@axis.apache.org by "Andreas Veithen (JIRA)" <ax...@ws.apache.org> on 2015/10/24 01:08:27 UTC
[jira] [Commented] (AXIS-2911) Axis depends on obsolete and
unmaintained commons-httpclient library
[ https://issues.apache.org/jira/browse/AXIS-2911?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14972065#comment-14972065 ]
Andreas Veithen commented on AXIS-2911:
---------------------------------------
What features would this transport provide that are not provided by the new HTTP transport based on java.net.URL (http://axis.apache.org/axis/java/transports/http-javanet/index.html)?
> Axis depends on obsolete and unmaintained commons-httpclient library
> --------------------------------------------------------------------
>
> Key: AXIS-2911
> URL: https://issues.apache.org/jira/browse/AXIS-2911
> Project: Axis
> Issue Type: Bug
> Components: Basic Architecture
> Affects Versions: 1.4
> Environment: Debian GNU/Linux
> Reporter: Markus Koschany
> Labels: security
>
> Axis depends on commons-httpclient. https://hc.apache.org/httpclient-3.x/
> This library has reached EOL status four years ago and was replaced by Apache httpcomponents-client:
> https://hc.apache.org/httpcomponents-client-ga/index.html
> commons-httpclient was affected by multiple security issues in the past but is no longer supported by its upstream developers. This makes it difficult for Linux distributions to provide any support for applications and libraries which still depend on commons-httpclient.
> Please consider to make the switch to httpcomponents-client
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: java-dev-unsubscribe@axis.apache.org
For additional commands, e-mail: java-dev-help@axis.apache.org