Uploaded image for project: 'Nuxeo Platform'
  1. Nuxeo Platform
  2. NXP-32306

update aws java sdk to 1.12.650

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 2021.48, 2023.6
    • Fix Version/s: 2021.50, 2023.8
    • Component/s: AWS, S3
    • Release Notes Summary:
      AWS java sdk upgraded to v1.12.650, ion-java-1.0.2.jar is no longer installed by amazon-s3-online-storage marketplace
    • Tags:
    • Backlog priority:
      900
    • Sprint:
      nxplatform #106
    • Story Points:
      3

      Description

      A client has a concern about CVE-2024-21634

      ion-java was deprecated in the sdk in part to avoid the issue: Use of deprecated ion-java · Issue #3077 · aws/aws-sdk-java (github.com)

      Align nuxeo on 1.12.650 and ensure that the hotfix removes ion-java-1.0.2.jar from nxserver/lib

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: