[
https://issues.apache.org/jira/browse/JAMES-4114?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Benoit Tellier closed JAMES-4114.
---------------------------------
Resolution: Fixed
> Upgrade AWS S3 SDK client to v2.30.17+
> --------------------------------------
>
> Key: JAMES-4114
> URL: https://issues.apache.org/jira/browse/JAMES-4114
> Project: James Server
> Issue Type: Improvement
> Reporter: René Cordier
> Priority: Major
> Fix For: 3.9.0
>
>
> We need to upgrade netty libs to 4.1.118 to be able to address the following
> CVE [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw]
> For having libs aligned, we need as well to upgrade then the s3 libs to at
> least 2.30.17.
> Problem is there is some big breaking changes with the S3 API which impact
> S3-compatible object storages that need to adapt too.
> On the attempt made in this PR
> [https://github.com/apache/james-project/pull/2638#issuecomment-2659417863]
> tt created numerous issues.
> We need to refactor and change the test server we use, as scality does not
> seem to want to adapt to those new changes. So all our test suite with it is
> broken.
> We need as well to do testing with OVH S3 environment and latest Minio (which
> I think could be a good candidate for testing too)
> If anybody else in the community needs to test this against an other S3
> compatible object storage, please don't hesitate to comment as well.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
