You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ws.apache.org by "Andreas Veithen (Jira)" <ji...@apache.org> on 2024/09/12 16:49:00 UTC

[jira] [Commented] (AXIOM-521) Update apache-mime4j-core dependency

    [ https://issues.apache.org/jira/browse/AXIOM-521?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17881369#comment-17881369 ] 

Andreas Veithen commented on AXIOM-521:
---------------------------------------

What happens if you just use Axiom 1.4.0 with a newer version of Mime4J? Are there any incompatibilities?

> Update apache-mime4j-core dependency
> ------------------------------------
>
>                 Key: AXIOM-521
>                 URL: https://issues.apache.org/jira/browse/AXIOM-521
>             Project: Axiom
>          Issue Type: Dependency upgrade
>            Reporter: Felix Schnabel
>            Priority: Major
>
> The most recent version of Axiom API (1.4.0) currently depends on the org.apache.james:apache-mime4j-core:0.8.6 artifact which has a reported security vulnerability.
> Would it be possible to release a Patch for Axiom (1.4.1) where this dependency is updated to >= 0.8.10?
>  
> Links:
>  - Axiom API: [https://mvnrepository.com/artifact/org.apache.ws.commons.axiom/axiom-api/1.4.0]
>  - Mime4j Core: [https://mvnrepository.com/artifact/org.apache.james/apache-mime4j-core]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@ws.apache.org
For additional commands, e-mail: dev-help@ws.apache.org