[
https://issues.apache.org/jira/browse/IVY-1644?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17735669#comment-17735669
]
Claus Ibsen commented on IVY-1644:
----------------------------------
Thanks Stefan for the heads up. Looking forward to a 2.5.2 release, thanks.
> Upgrade httpclient to 4.5.13
> ----------------------------
>
> Key: IVY-1644
> URL: https://issues.apache.org/jira/browse/IVY-1644
> Project: Ivy
> Issue Type: Dependency upgrade
> Components: Core
> Affects Versions: 2.5.1
> Reporter: Claus Ibsen
> Priority: Major
>
> The apache ivy 4.5.1 release comes with 4.5.10 version of the http client
> httpclient-4.5.10.jar
> httpcore-4.4.12.jar
> <dependency>
> <groupId>org.apache.httpcomponents</groupId>
> <artifactId>httpclient</artifactId>
> <version>4.5.10</version>
> </dependency>
> It would be good to upgrade to 4.5.13 to fix CVEs
> If you manual upgrade then you have an ugly WARN from apache ivy
> Exception in thread "ivy-httpclient-shutdown-handler"
> java.lang.NoClassDefFoundError:
> org/apache/http/impl/conn/PoolingHttpClientConnectionManager$2
> at
> org.apache.http.impl.conn.PoolingHttpClientConnectionManager.shutdown(PoolingHttpClientConnectionManager.java:413)
> at
> org.apache.http.impl.client.HttpClientBuilder$2.close(HttpClientBuilder.java:1244)
> at
> org.apache.http.impl.client.InternalHttpClient.close(InternalHttpClient.java:201)
> at
> org.apache.ivy.util.url.HttpClientHandler.close(HttpClientHandler.java:357)
> at
> org.apache.ivy.util.url.HttpClientHandler$1.run(HttpClientHandler.java:84)
> at java.base/java.lang.Thread.run(Thread.java:833)
> Caused by: java.lang.ClassNotFoundException:
> org.apache.http.impl.conn.PoolingHttpClientConnectionManager$2
> at
> org.codehaus.plexus.classworlds.strategy.SelfFirstStrategy.loadClass(SelfFirstStrategy.java:50)
> at
> org.codehaus.plexus.classworlds.realm.ClassRealm.unsynchronizedLoadClass(ClassRealm.java:271)
> at
> org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:247)
> at
> org.codehaus.plexus.classworlds.realm.ClassRealm.loadClass(ClassRealm.java:239)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
