[
https://issues.apache.org/jira/browse/CAMEL-13083?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16901182#comment-16901182
]
Claus Ibsen commented on CAMEL-13083:
-------------------------------------
Okay so swagger OSGi is locked to a single version (darn you OSGi ...)
[WARNING] Feature resolution failed for [camel-rest-swagger/3.0.0.SNAPSHOT]
Message: Unable to resolve root: missing requirement [root] osgi.identity;
osgi.identity=camel-rest-swagger; type=karaf.feature; version=3.0.0.SNAPSHOT;
filter:="(&(osgi.identity=camel-rest-swagger)(type=karaf.feature)(version>=3.0.0.SNAPSHOT))"
[caused by: Unable to resolve camel-rest-swagger/3.0.0.SNAPSHOT: missing
requirement [camel-rest-swagger/3.0.0.SNAPSHOT] osgi.identity;
osgi.identity=org.apache.camel.camel-rest-swagger; type=osgi.bundle;
version="[3.0.0.SNAPSHOT,3.0.0.SNAPSHOT]"; resolution:=mandatory [caused by:
Unable to resolve org.apache.camel.camel-rest-swagger/3.0.0.SNAPSHOT: missing
requirement [org.apache.camel.camel-rest-swagger/3.0.0.SNAPSHOT]
osgi.wiring.package;
filter:="(&(osgi.wiring.package=io.swagger.util)(version>=1.5.0)(!(version>=2.0.0)))"
[caused by: Unable to resolve io.swagger.core/1.5.21: missing requirement
[io.swagger.core/1.5.21] osgi.wiring.package;
filter:="(&(osgi.wiring.package=com.google.common.collect)(version>=20.0.0)(!(version>=21.0.0)))"]]]
Repositories: {
> Upgrade to latest Guava version for Swagger dependency
> ------------------------------------------------------
>
> Key: CAMEL-13083
> URL: https://issues.apache.org/jira/browse/CAMEL-13083
> Project: Camel
> Issue Type: Improvement
> Reporter: Darius Cooper
> Priority: Minor
> Fix For: Future
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Guava up to ver 24.1 has a denial of service vulnerability.
> Upgrade the camel-swagger dependency on Guava to a newer version.
> Would be nice if this could go in the 2.23.x version and above
--
This message was sent by Atlassian JIRA
(v7.6.14#76016)
