Latest Jar for cq-wcm-foundation not available

[sudeip]

We are using the foundation jar file for building components and the version available is 5.6.4.

https://repo.adobe.com/nexus/content/groups/public/com/day/cq/wcm/cq-wcm-foundation/5.6.4/cq-wcm-fou...

The issue today is the dependencies like commons-httpclient still has older version 3.1 which have security vulnerabilities.

[Feike_Visser1]

what version of AEM do you use?

[sudeip]

We are using AEM 6.0

[Feike_Visser1 · Accepted solution]

you can use then the uber-jar, that contains the new public dependencies.

[Jörg_Hoh]

Hi,

so you are basically looking for a version of this bundle, which does not have a dependency anymore to httpclient 3.1, but a 4.x version?

Jörg

[sudeip]

Thats correct Jorg. 

Thanks Feike, I will look for uber-jar and see if this works.

-Sudeep