René Cordier created JAMES-4114:
-----------------------------------

             Summary: Upgrade AWS S3 SDK client to v2.30.17+
                 Key: JAMES-4114
                 URL: https://issues.apache.org/jira/browse/JAMES-4114
             Project: James Server
          Issue Type: Improvement
            Reporter: René Cordier
             Fix For: 3.9.0


We need to upgrade netty libs to 4.1.118 to be able to address the following 
CVE [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw]

For having libs aligned, we need as well to upgrade then the s3 libs to at 
least 2.30.17.

Problem is there is some big breaking changes with the S3 API which impact 
S3-compatible object storages that need to adapt too.

On the attempt made in this PR 
[https://github.com/apache/james-project/pull/2638#issuecomment-2659417863] tt 
created numerous issues.

We need to refactor and change the test server we use, as scality does not seem 
to want to adapt to those new changes. So all our test suite with it is broken.

We need as well to do testing with OVH S3 environment and latest Minio (which I 
think could be a good candidate for testing too)

If anybody else in the community needs to test this against an other S3 
compatible object storage, please don't hesitate to comment as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to