You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hc.apache.org by "Michael Osipov (Jira)" <ji...@apache.org> on 2021/04/11 09:09:00 UTC
[jira] [Closed] (HTTPCLIENT-2150) Update to Apache Commons Codec
1.15
[ https://issues.apache.org/jira/browse/HTTPCLIENT-2150?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Michael Osipov closed HTTPCLIENT-2150.
--------------------------------------
Resolution: Duplicate
> Update to Apache Commons Codec 1.15
> -----------------------------------
>
> Key: HTTPCLIENT-2150
> URL: https://issues.apache.org/jira/browse/HTTPCLIENT-2150
> Project: HttpComponents HttpClient
> Issue Type: Bug
> Components: HttpCache
> Affects Versions: 4.5.13
> Reporter: Jochen Schalanda
> Priority: Trivial
> Labels: security
>
> Apache HttpClient 4.5.13 currently depends on Apache Commons Codec 1.11 which is vulnerable to [WS-2019-0379|https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0379].
> [https://github.com/apache/httpcomponents-client/blob/rel/v4.5.13/pom.xml#L71]
> The issue has been resolved in [Apache Commons Codec 1.13|https://commons.apache.org/proper/commons-codec/changes-report.html#a1.13] (CODEC-134).
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@hc.apache.org
For additional commands, e-mail: dev-help@hc.apache.org