[
https://issues.apache.org/jira/browse/XALANJ-2632?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Dan Royer updated XALANJ-2632:
------------------------------
Description:
*Problem:*
xalan-2.7.2.jar from maven central has a
_META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring
_org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist
in the JAR.
*Expected:*
declared implementation to exist in the JAR.
*Workarounds:*
unknown
*Additional Context:*
My project has been using BATIK to load SVGs, [with
difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].
We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs
we're facing. This, in turn, causes an exception at boot.
{code:java}
Error occurred during initialization of boot layer
java.lang.module.FindException: Unable to derive module descriptor for
C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class
org.apache.bsf.BSFManager not in module{code}
Which is how I found the issue.
Also, xalan-2.7.2 on Maven Central lists [several
vulnerabilities|[https://mvnrepository.com/artifact/xalan/xalan/2.7.2]] Is an
update in the works?
Thank you!
was:
*Problem:*
xalan-2.7.2.jar from maven central has a
_META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring
_org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't exist
in the JAR.
*Expected:*
declared implementation to exist in the JAR.
*Workarounds:*
unknown
*Additional Context:*
My project has been using BATIK to load SVGs, [with
difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].
We're trying instead EchoSVG, a fork of BATIK trying to get around some bugs
we're facing. This, in turn, causes an exception at boot.
{code:java}
Error occurred during initialization of boot layer
java.lang.module.FindException: Unable to derive module descriptor for
C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class
org.apache.bsf.BSFManager not in module{code}
Which is how I found the issue.
Also, xalan-2.7.2 on Maven Central lists [several
vulnerabilities|[https://mvnrepository.com/artifact/xalan/xalan/2.7.2].] Is an
update in the works?
Thank you!
> xalan-2.7.2.jar provides class org.apache.bsf.BSFManager not in module
> ----------------------------------------------------------------------
>
> Key: XALANJ-2632
> URL: https://issues.apache.org/jira/browse/XALANJ-2632
> Project: XalanJ2
> Issue Type: Bug
> Security Level: No security risk; visible to anyone(Ordinary problems in
> Xalan projects. Anybody can view the issue.)
> Components: Xalan
> Affects Versions: 2.7.2
> Environment: windows 10 + IntelliJ
> Reporter: Dan Royer
> Assignee: Gary D. Gregory
> Priority: Major
>
>
> *Problem:*
> xalan-2.7.2.jar from maven central has a
> _META-INF/services/org.apache.xalan.extensions.bsf.BSFManager_ file declaring
> _org.apache.bsf.BSFManager_ as a provider ... but org.apache.bsf doesn't
> exist in the JAR.
> *Expected:*
> declared implementation to exist in the JAR.
> *Workarounds:*
> unknown
> *Additional Context:*
> My project has been using BATIK to load SVGs, [with
> difficulties|https://github.com/MarginallyClever/Makelangelo-software/issues?q=is%3Aissue+is%3Aopen+label%3ASVG].
> We're trying instead EchoSVG, a fork of BATIK trying to get around some
> bugs we're facing. This, in turn, causes an exception at boot.
> {code:java}
> Error occurred during initialization of boot layer
> java.lang.module.FindException: Unable to derive module descriptor for
> C:\Users\aggra\.m2\repository\xalan\xalan\2.7.2\xalan-2.7.2.jar
> Caused by: java.lang.module.InvalidModuleDescriptorException: Provider class
> org.apache.bsf.BSFManager not in module{code}
> Which is how I found the issue.
> Also, xalan-2.7.2 on Maven Central lists [several
> vulnerabilities|[https://mvnrepository.com/artifact/xalan/xalan/2.7.2]] Is
> an update in the works?
>
> Thank you!
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@xalan.apache.org
For additional commands, e-mail: dev-h...@xalan.apache.org
