Re: Transition from libcommons-httpclient-java to libhttpclient-java

2015-10-05 Thread Markus Koschany
Hi, I have filed bug reports to remind us and fellow maintainers that the following libraries are obsolete or should / can be updated to newer versions: - libcommons-net2-java - libasm3-java - libcommons-httpclient-java - libservlet2.5-java I have also created a Wiki page which provides a simple

Re: Transition from libcommons-httpclient-java to libhttpclient-java

2015-10-01 Thread Markus Koschany
Am 30.09.2015 um 21:56 schrieb Emmanuel Bourg: > Le 30/09/2015 20:19, Markus Koschany a écrit : > >> I think we should file bug reports and start replacing >> libcommons-httpclient-java with libhttpclient-java. > > I'm not convinced by the need to force this transition. Patching the > rare securi

Re: Transition from libcommons-httpclient-java to libhttpclient-java

2015-09-30 Thread Emmanuel Bourg
Le 30/09/2015 20:19, Markus Koschany a écrit : > I think we should file bug reports and start replacing > libcommons-httpclient-java with libhttpclient-java. I'm not convinced by the need to force this transition. Patching the rare security issues requires much less resources than rewriting and t

Transition from libcommons-httpclient-java to libhttpclient-java

2015-09-30 Thread Markus Koschany
Hi, I think we should file bug reports and start replacing libcommons-httpclient-java with libhttpclient-java. Reasoning: commons-httpclient is obsolete and has been EOL since 2011. It is no longer supported and was/is affected by multiple security issues. [1] I suggest to file bug reports with