Andrew Pavlin created CMIS-1077:
-----------------------------------
Summary: need to update out-of-date dependencies with CVEs
Key: CMIS-1077
URL: https://issues.apache.org/jira/browse/CMIS-1077
Project: Chemistry
Issue Type: Bug
Components: opencmis-client, opencmis-client-bindings,
opencmis-commons
Affects Versions: OpenCMIS 1.1.0
Reporter: Andrew Pavlin
The last official build of Chemistry is badly out of date with regard to its
dependencies. Would it be possible to come out with a patch release that brings
those dependencies up-to-date? Specifically, for the sub-parts of Chemistry our
project is using, the obsolete dependencies are:
Apache Httpcomponents (using 4.2.6, currently 4.5)
com.squareup.okhttp3 (using 3.4.1, currently 3.13.1)
Apache CXF (using 3.0.12, currently 3.3.2)
org.osgi.core (using 5.0.0, currently 6.0.0)
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
