This is an automated email from the ASF dual-hosted git repository.
olamy pushed a commit to branch archiva-2.x
in repository https://gitbox.apache.org/repos/asf/archiva.git
The following commit(s) were added to refs/heads/archiva-2.x by this push:
new 057eb869a MRM-2049: upgrade httpclient due to cves (#104)
057eb869a is described below
commit 057eb869a82c042b9b03c5919c622fa1bfafc279
Author: PJ Fanning <[email protected]>
AuthorDate: Tue May 31 22:24:52 2022 +0100
MRM-2049: upgrade httpclient due to cves (#104)
* upgrade httpclient due to cves
* Update pom.xml
---
pom.xml | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/pom.xml b/pom.xml
index 1e1ccee54..0a9882f59 100644
--- a/pom.xml
+++ b/pom.xml
@@ -52,7 +52,7 @@
<maven.compiler.source>8</maven.compiler.source>
<maven.compiler.target>8</maven.compiler.target>
- <commons-codec.version>1.6</commons-codec.version>
+ <commons-codec.version>1.11</commons-codec.version>
<commons-collections.version>3.2.2</commons-collections.version>
<commons-fileupload.version>1.2.2</commons-fileupload.version>
<commons-io.version>2.4</commons-io.version>
@@ -87,8 +87,8 @@
<cxf.version>3.0.3</cxf.version>
<derbyVersion>10.10.1.1</derbyVersion>
- <httpclient.version>4.5.2</httpclient.version>
- <httpclient.core.version>4.4.4</httpclient.core.version>
+ <httpclient.version>4.5.13</httpclient.version>
+ <httpclient.core.version>4.4.15</httpclient.core.version>
<javaxMailVersion>1.4</javaxMailVersion>
<jettyVersion>8.1.14.v20131031</jettyVersion>
<guava.version>16.0.1</guava.version>