[
https://issues.apache.org/jira/browse/CXF-5565?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13910261#comment-13910261
]
Willem Jiang commented on CXF-5565:
-----------------------------------
I just found there are lots third part dependencies are introduced when I
upgrade the opensaml version.
The NPE can be fixed by remove the dependency of
org.bouncycastle:bcprov-jdk15:jar:1.45.
> update to opensaml 2.6.1
> ------------------------
>
> Key: CXF-5565
> URL: https://issues.apache.org/jira/browse/CXF-5565
> Project: CXF
> Issue Type: Task
> Reporter: Jonathan Anstey
> Assignee: Willem Jiang
> Attachments: CXF-5565.patch
>
>
> Fixes CVE-2013-6440. Waiting for SMX bundles release to complete first though.
--
This message was sent by Atlassian JIRA
(v6.1.5#6160)
