Claus Ibsen created IVY-1644:
--------------------------------
Summary: Upgrade httpclient to 4.5.13
Key: IVY-1644
URL: https://issues.apache.org/jira/browse/IVY-1644
Project: Ivy
Issue Type: Dependency upgrade
Components: Core
Affects Versions: 2.5.1
Reporter: Claus Ibsen
The apache ivy 4.5.1 release comes with 4.5.10 version of the http client
httpclient-4.5.10.jar
httpcore-4.4.12.jar
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>4.5.10</version>
</dependency>
It would be good to upgrade to 4.5.13 to fix CVEs
If you manual upgrade then you have an ugly WARN from apache ivy
Exception in thread "ivy-httpclient-shutdown-handler"
java.lang.NoClassDefFoundError:
org/apache/http/impl/conn/PoolingHttpClientConnectionManager$2
at
org.apache.http.impl.conn.PoolingHttpClientConnectionManager.shutdown(PoolingHttpClientConnectionManager.java:413)
at
org.apache.http.impl.client.HttpClientBuilder$2.close(HttpClientBuilder.java:1244)
at
org.apache.http.impl.client.InternalHttpClient.close(InternalHttpClient.java:201)
at
org.apache.ivy.util.url.HttpClientHandler.close(HttpClientHandler.java:357)
at
org.apache.ivy.util.url.HttpClientHandler$1.run(HttpClientHandler.java:84)
at java.base/java.lang.Thread.run(Thread.java:833)
Caused by: java.lang.ClassNotFoundException:
org.apache.http.impl.conn.PoolingHttpClientConnectionManager$2
at
org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass(SelfFirstStrategy.java:50)
at
org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass(ClassRealm.java:271)
at
org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:247)
at
org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:239)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
