[ 
https://issues.apache.org/jira/browse/JAMES-4114?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17927630#comment-17927630
 ] 

Benoit Tellier commented on JAMES-4114:
---------------------------------------

An alternative could be to switch drivers but unfortunately I found no good 
asynchronous S3 compatible drivers in Java...

> Upgrade AWS S3 SDK client to v2.30.17+
> --------------------------------------
>
>                 Key: JAMES-4114
>                 URL: https://issues.apache.org/jira/browse/JAMES-4114
>             Project: James Server
>          Issue Type: Improvement
>            Reporter: René Cordier
>            Priority: Major
>             Fix For: 3.9.0
>
>
> We need to upgrade netty libs to 4.1.118 to be able to address the following 
> CVE [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw]
> For having libs aligned, we need as well to upgrade then the s3 libs to at 
> least 2.30.17.
> Problem is there is some big breaking changes with the S3 API which impact 
> S3-compatible object storages that need to adapt too.
> On the attempt made in this PR 
> [https://github.com/apache/james-project/pull/2638#issuecomment-2659417863] 
> tt created numerous issues.
> We need to refactor and change the test server we use, as scality does not 
> seem to want to adapt to those new changes. So all our test suite with it is 
> broken.
> We need as well to do testing with OVH S3 environment and latest Minio (which 
> I think could be a good candidate for testing too)
> If anybody else in the community needs to test this against an other S3 
> compatible object storage, please don't hesitate to comment as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to