]> source.dussan.org Git - archiva.git/commitdiff
MRM-2049: upgrade httpclient due to cves (#104)
authorPJ Fanning <pjfanning@users.noreply.github.com>
Tue, 31 May 2022 21:24:52 +0000 (22:24 +0100)
committerGitHub <noreply@github.com>
Tue, 31 May 2022 21:24:52 +0000 (07:24 +1000)
* upgrade httpclient due to cves

* Update pom.xml

pom.xml

diff --git a/pom.xml b/pom.xml
index 1e1ccee545a26119991207403cc0aed622d3b2a8..0a9882f59dca04ee17e551f8569cb2759b68091f 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -52,7 +52,7 @@
     <maven.compiler.source>8</maven.compiler.source>
     <maven.compiler.target>8</maven.compiler.target>
 
-    <commons-codec.version>1.6</commons-codec.version>
+    <commons-codec.version>1.11</commons-codec.version>
     <commons-collections.version>3.2.2</commons-collections.version>
     <commons-fileupload.version>1.2.2</commons-fileupload.version>
     <commons-io.version>2.4</commons-io.version>
@@ -87,8 +87,8 @@
 
     <cxf.version>3.0.3</cxf.version>
     <derbyVersion>10.10.1.1</derbyVersion>
-    <httpclient.version>4.5.2</httpclient.version>
-    <httpclient.core.version>4.4.4</httpclient.core.version>
+    <httpclient.version>4.5.13</httpclient.version>
+    <httpclient.core.version>4.4.15</httpclient.core.version>
     <javaxMailVersion>1.4</javaxMailVersion>
     <jettyVersion>8.1.14.v20131031</jettyVersion>
     <guava.version>16.0.1</guava.version>