Skip to content

Commit 0df1fa9

Browse files
authored
SITES-44663 - core.wcm.components.core bundle is not installable on AEM 6.5 / 6.5 LTS — commons-lang3 OSGi import range too narrow (#3034)
* Add explicit Import-Package directive for org.apache.commons.lang3 and org.apache.commons.lang3.tuple with version range [3.12,4) in bundles/core/pom.xml. * Restores compatibility with AEM 6.5 (SP18+) and 6.5 LTS (SP1+) which ship commons-lang3 3.12-3.19, while keeping the bundle compatible with the AEM as a Cloud Service SDK (commons-lang3 3.20+). * Compile-time dependency in parent/pom.xml stays at 3.20.0 - the CVE-2025-48924 (Snyk) fix introduced in PR #3015 is preserved at build time. * Only StringUtils, ArrayUtils, ObjectUtils, CharEncoding, tuple.Pair and tuple.ImmutablePair are referenced in the bundle source - all available since commons-lang3 3.0.
1 parent c6f6980 commit 0df1fa9

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

bundles/core/pom.xml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,8 @@
7777
com.day.cq.dam.api.handler;version="[2,3)",
7878
com.adobe.cq.dam.cfm.content;version="[1.1,2)",
7979
com.adobe.cq.dam.cfm.converter;version="[1,2)",
80+
org.apache.commons.lang3;version="[3.12,4)",
81+
org.apache.commons.lang3.tuple;version="[3.12,4)",
8082
*
8183
</Import-Package>
8284
</instructions>

0 commit comments

Comments
 (0)