[
https://issues.apache.org/jira/browse/JCR-3912?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Julian Reschke updated JCR-3912:
--------------------------------
Labels: (was: security)
> Jackrabbit depends on obsolete commons-httpclient library
> ---------------------------------------------------------
>
> Key: JCR-3912
> URL: https://issues.apache.org/jira/browse/JCR-3912
> Project: Jackrabbit Content Repository
> Issue Type: Bug
> Components: security
> Affects Versions: 2.10.1, 2.11.0
> Environment: Debian GNU/Linux
> Reporter: Markus Koschany
> Priority: Major
>
> Hello,
> jackrabbit depends on commons-httpclient.
> https://hc.apache.org/httpclient-3.x/
> This library has reached EOL status four years ago and was replaced by Apache
> httpcomponents-client:
> https://hc.apache.org/httpcomponents-client-ga/index.html
> commons-httpclient was affected by multiple security issues in the past but
> is no longer supported by its upstream developers. This makes it difficult
> for Linux distributions to provide any support for applications and libraries
> which still depend on commons-httpclient.
> Please consider to make the switch to httpcomponents-client
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
