[ https://issues.apache.org/jira/browse/JAMES-4114?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17927630#comment-17927630 ]
Benoit Tellier commented on JAMES-4114: --------------------------------------- An alternative could be to switch drivers but unfortunately I found no good asynchronous S3 compatible drivers in Java... > Upgrade AWS S3 SDK client to v2.30.17+ > -------------------------------------- > > Key: JAMES-4114 > URL: https://issues.apache.org/jira/browse/JAMES-4114 > Project: James Server > Issue Type: Improvement > Reporter: René Cordier > Priority: Major > Fix For: 3.9.0 > > > We need to upgrade netty libs to 4.1.118 to be able to address the following > CVE [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw] > For having libs aligned, we need as well to upgrade then the s3 libs to at > least 2.30.17. > Problem is there is some big breaking changes with the S3 API which impact > S3-compatible object storages that need to adapt too. > On the attempt made in this PR > [https://github.com/apache/james-project/pull/2638#issuecomment-2659417863] > tt created numerous issues. > We need to refactor and change the test server we use, as scality does not > seem to want to adapt to those new changes. So all our test suite with it is > broken. > We need as well to do testing with OVH S3 environment and latest Minio (which > I think could be a good candidate for testing too) > If anybody else in the community needs to test this against an other S3 > compatible object storage, please don't hesitate to comment as well. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org For additional commands, e-mail: server-dev-h...@james.apache.org