[jira] [Closed] (JAMES-4114) Upgrade AWS S3 SDK client to v2.30.17+

"Benoit Tellier (Jira)" <[email protected]>
Newsgroups gmane.comp.jakarta.james.devel
Message-ID <[email protected]>
     [ https://issues.apache.org/jira/browse/JAMES-4114?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Benoit Tellier closed JAMES-4114.
---------------------------------
    Resolution: Fixed

> Upgrade AWS S3 SDK client to v2.30.17+
> --------------------------------------
>
>                 Key: JAMES-4114
>                 URL: https://issues.apache.org/jira/browse/JAMES-4114
>             Project: James Server
>          Issue Type: Improvement
>            Reporter: René Cordier
>            Priority: Major
>             Fix For: 3.9.0
>
>
> We need to upgrade netty libs to 4.1.118 to be able to address the following CVE [https://github.com/advisories/GHSA-4g8c-wm8x-jfhw]
> For having libs aligned, we need as well to upgrade then the s3 libs to at least 2.30.17.
> Problem is there is some big breaking changes with the S3 API which impact S3-compatible object storages that need to adapt too.
> On the attempt made in this PR [https://github.com/apache/james-project/pull/2638#issuecomment-2659417863] tt created numerous issues.
> We need to refactor and change the test server we use, as scality does not seem to want to adapt to those new changes. So all our test suite with it is broken.
> We need as well to do testing with OVH S3 environment and latest Minio (which I think could be a good candidate for testing too)
> If anybody else in the community needs to test this against an other S3 compatible object storage, please don't hesitate to comment as well.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.