Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade httpclient dependency #16

Open
LucaCinquini opened this issue Nov 19, 2015 · 2 comments
Open

Upgrade httpclient dependency #16

LucaCinquini opened this issue Nov 19, 2015 · 2 comments
Assignees
@LucaCinquini
Milestone
Release 2.7.0

Comments

@LucaCinquini
Copy link
Member

Because of known vulnerabilities, must upgrade the commons-http library to httpclient-4.5.1.jar
@LucaCinquini LucaCinquini self-assigned this Nov 19, 2015
@LucaCinquini LucaCinquini added this to the Release 2.7.0 milestone Nov 19, 2015
@LucaCinquini
Copy link
Member Author

First of all, the httpclient dependency was removed from the old node-manager, which is not using it, rather using Hessian. Node-manager is a dependency for esgf-security.

@LucaCinquini
Copy link
Member Author

Then, upgrade the httpclient dependency in esgf-security as such:

dependency org="org.apache.httpcomponents" name="httpclient" rev="4.5.1"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@LucaCinquini LucaCinquini

Labels
None yet
Projects
None yet
Milestone
Release 2.7.0
Development

No branches or pull requests
1 participant
@LucaCinquini