Guide - 7.10.38.9 Library Updates on Patch Level
Introduction
This guide provides information about the update of several libraries. This update might cause migration efforts on custom source projects.
Library Updates
To avoid major project adaptions, we updated the following libraries on patch level only. Some libraries required a major or minor update to keep compatibility to other libraries.
| Library | Old Version | New Version | Comment |
|---|---|---|---|
| com.fasterxml.jackson.*:* | 2.12.1 | 2.12.6 | |
| com.fasterxml:classmate | 1.3.1 | 1.3.4 | |
| com.google.code.findbugs:jsr305 | 2.0.1 | 3.0.2 | |
| com.google.code.gson:gson | 2.8.6 | 2.8.9 | |
| com.google.errorprone:error_prone_annotations | 2.3.1 | 2.3.4 | |
| com.google.crypto.tink:tink | 1.4.0 | 1.6.1 | |
| com.google.inject.extensions:* | 4.2.2 | 4.2.3 | |
| com.google.inject:guice | 4.2.2 | 4.2.3 | |
| com.google.protobuf:protobuf-java | 3.11.1 | 3.19.4 | |
| com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer | 20200713.1 | 20211018.2 | |
| com.jcraft:jsch | 0.1.54 | 0.1.55 | |
| com.microsoft.azure:azure-keyvault-core | 0.8.0 | 0.8.3 | |
| com.microsoft.sqlserver:mssql-jdbc | 9.4.0.jre8 | 9.4.1.jre8 | |
| com.netflix.archaius:archaius-core | 0.7.5 | 0.7.7 | |
| com.netflix.servo:servo-core | 0.12.12 | 0.13.2 | |
| com.rometools:* | 1.7.1 | 1.7.4 | |
| com.thoughtworks.xstream:xstream | 1.4.11 | 1.4.19 | |
| com.yahoo.platform.yui:yuicompressor | 2.4.7 | 2.4.8 | |
| commons-io:commons-io | 2.5 | 2.11.0 | |
| commons-pool:commons-pool | 1.5.4 | 1.5.7 | |
| io.swagger.codegen.v3:swagger-codegen-cli | 3.0.24 | 3.0.33 | |
| io.swagger.core.v3:* | 2.1.6 | 2.1.13 | |
| javax.activation:activation | 1.1 | 1.1.1 | |
| joda-time:joda-time | 2.9.7 | 2.9.9 | |
| net.minidev:json-smart | 2.3 | 2.4.8 | |
| org.apache.ant:ant | 1.8.4 | 1.10.12 | |
| org.apache.ant:ant-launcher | 1.10.0 | 1.10.12 | |
| org.apache.axis2:* | 1.7.7 | 1.7.9 | |
| org.apache.commons:commons-pool2 | 2.4.2 | 2.4.3 | |
| org.apache.httpcomponents:httpclient | 4.5.6 | 4.5.13 | |
| org.apache.httpcomponents:httpmime | 4.5.6 | 4.5.13 | |
| org.apache.httpcomponents:httpcore | 4.4.10 | 4.4.15 | |
| org.apache.kafka:kafka-clients | 0.9.0.0 | 0.9.0.1 | |
| org.apache.neethi:neethi | 3.0.3 | 3.2.0 | |
| org.apache.rampart:* | 1.7.0 | 1.7.1 | |
| org.apache.santuario:xmlsec | 1.5.8 | 2.3.0 |  Major update |
| org.apache.tomcat.embed:tomcat-embed-core | 9.0.50 | 9.0.59 | |
| org.apache.tomcat:* | 9.0.50 | 9.0.59 | |
| org.apache.ws.commons.axiom:axiom-api | 1.2.20 | 1.2.22 | |
| org.apache.ws.xmlschema:xmlschema-core | 2.2.1 | 2.2.5 | |
| org.apiguardian:apiguardian-api | 1.1.0 | 1.1.2 | |
| org.apache.solr:solr-solrj | 8.9.0 | 8.11.1 | Minimum SolrCloud version >= 8.6.3 / Version 8.5.1 causes issues with index rebuild and core creation |
| com.amazonaws:* | 1.11.873 | 1.12.172 | |
| bouncycastle:bcmail-jdk14 | 138 | (removed) | |
org.bouncycastle:bcprov-jdk15on | 1.68 | 1.70 | |
| org.bouncycastle:bcmail-jdk15on | (renamed) | 1.70 | Only as version |
| org.codehaus.janino:commons-compiler | 3.1.3 | 3.1.6 | |
| org.codehaus.janino:janino | 3.0.6 | 3.1.6 | |
| org.codehaus.woodstox:stax2-api | 3.1.1 | 4.2.1 | |
| org.codehaus.woodstox:woodstox-core-asl | 4.2.0 | (remove) | |
| org.glassfish.main.external:ldapbp-repackaged | 4.1.1 | 4.1.2 | |
| jakarta.inject:jakarta.inject-api | 2.0.0 | 2.0.1 | |
| org.hibernate:hibernate-validator | 5.3.1.Final | 5.4.3.Final | |
| org.jasypt:jasypt | 1.9.2 | 1.9.3 | |
| org.jboss.logging:jboss-logging | 3.3.0.Final | 3.3.3.Final | |
| org.jdom:jdom2 | 2.0.6 | 2.0.6.1 | |
| org.jfree:jcommon | 1.0.23 | 1.0.24 | |
| org.jgroups:jgroups | 4.2.8.Final | 4.2.20.Final | Please verify local/config/jgroups_udp.xml at Windows. The FILE_PING configuration value must contain a valid directory with double backslashes or slashes as separator (single slashes will be removed). |
org.slf4j:slf4j-api | 1.7.22 | 1.7.36 | |
| org.slf4j:log4j-over-slf4j | 1.7.22 | 1.7.36 | |
| org.xerial.snappy:snappy-java | 1.1.1.7 | 1.1.8.4 | |
| org.xhtmlrenderer:flying-saucer-core | 9.1.1 | 9.1.22 | |
| org.xhtmlrenderer:flying-saucer-pdf | 9.1.1 | 9.1.22 |
Possible Issues
Class Collision Check
| Old Library | Used Library | Conflicted Packages |
|---|---|---|
| org.codehaus.woodstox:woodstox-core-asl:4.2.1 | com.fasterxml.woodstox:woodstox-core:6.2.6 | com.ctc.wstxcc |
| bouncycastle:bcprov-jdk14:138 | org.bouncycastle:bcprov-jdk15on:1.68 | org.bouncycastle |
Exclude libraries from include.
Example exclude bouncycastle
compile ('group:artifact.contains.dependency')
{
exclude group: 'org.bouncycastle', module: 'bcmail-jdk14'
exclude group: 'org.bouncycastle', module: 'bcprov-jdk14'
exclude group: 'org.bouncycastle', module: 'bctsp-jdk14'
//exclude 'bouncycastle' (without 'org.'!)
exclude group: 'bouncycastle', module: 'bcmail-jdk14'
exclude group: 'bouncycastle', module: 'bcprov-jdk14'
exclude group: 'bouncycastle', module: 'bctsp-jdk14'
}
2.2 Availability in ICM versions
ICM | ICM version filter |
|---|---|
| 7.10.38.9-LTS | 4.3.1 |
Disclaimer
The information provided in the Knowledge Base may not be applicable to all systems and situations. Intershop Communications will not be liable to any party for any direct or indirect damages resulting from the use of the Customer Support section of the Intershop Corporate Web site, including, without limitation, any lost profits, business interruption, loss of programs or other data on your information handling system.