-
Type:
Bug
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 2.7.14
-
Fix Version/s: 3.0
-
Component/s: None
-
Labels:None
-
Estimated Complexity:Unknown
I cannot update to CXF 3.0.3 yet. Our internal release process has flagged our use of CXF 2.7.10 as problematic due to the use of httpasyncclient-4.0-beta3.jar which has a known security issue. I updated our server to CXF 2.7.14 but that still uses httpasyncclient-4.0-beta3.jar. I would be great to update this to the released version: 4.0.2.