[ 
https://issues.apache.org/jira/browse/FELIX-6421?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Carsten Ziegeler resolved FELIX-6421.
-------------------------------------
    Resolution: Invalid

4.6.0 contains commons-io 2.5 if you are using the "all" bundle. If you are 
using the normal bundle you can manage the dependencies of the web console 
yourself and use any compatible version

> Latest version(4.6.0) of org.apache.felix.webconsole contains 1.4 version of 
> commons-io
> ---------------------------------------------------------------------------------------
>
>                 Key: FELIX-6421
>                 URL: https://issues.apache.org/jira/browse/FELIX-6421
>             Project: Felix
>          Issue Type: Bug
>            Reporter: Shubham Kansal
>            Priority: Major
>
> Currently my application is using org.apache.felix.webconsole-1.0.0.jar which 
> vulnerable version: *1.1* of *Commons IO.* I want to upgrade commons-io to 
> version 2.8, but the latest version org.apache.felix.webconsole-4.6.0.jar 
> contains *1.4* version of commons-io jar.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to