[jira] [Commented] (RAMPART-449) NoClassDefFoundError with Axis2 1.8.0

2022-02-07 Thread Fergal Gavin (Jira)


[ 
https://issues.apache.org/jira/browse/RAMPART-449?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17487978#comment-17487978
 ] 

Fergal Gavin commented on RAMPART-449:
--

Thanks [~robertlazarski] ,

Appreciate the response and the fact that this is all done on a volunteer basis.

I will monitor these tickets for updates so anything positive to share for our 
project by the end of March would be welcome.

Regards,

Fergal.

> NoClassDefFoundError with Axis2 1.8.0
> -
>
> Key: RAMPART-449
> URL: https://issues.apache.org/jira/browse/RAMPART-449
> Project: Rampart
>  Issue Type: Bug
>  Components: rampart-core
>Affects Versions: 1.7.1
>Reporter: Matthias Kraaz
>Priority: Major
>
> Axis2 1.8.0 updated Axiom to 1.3 thereby breaking rampart, which uses an 
> Axiom API that has been removed:
>  
> {noformat}
> java.lang.NoClassDefFoundError: 
> org/apache/axiom/soap/impl/builder/StAXSOAPModelBuilder
> at 
> org.apache.rampart.util.Axis2Util.getDocumentFromSOAPEnvelope(Axis2Util.java:159)
>  
> at org.apache.rampart.RampartMessageData.(RampartMessageData.java:280) 
> at org.apache.rampart.MessageBuilder.build(MessageBuilder.java:61) 
> at org.apache.rampart.handler.RampartSender.invoke(RampartSender.java:65) 
> at org.apache.axis2.engine.Phase.invokeHandler(Phase.java:335) 
> at org.apache.axis2.engine.Phase.invoke(Phase.java:308) 
> at org.apache.axis2.engine.AxisEngine.invoke(AxisEngine.java:250) 
> at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:415) 
> at 
> org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:399)
>  
> at 
> org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:225)
>  
> at org.apache.axis2.client.OperationClient.execute(OperationClient.java:150) 
> at pls.soap.client.SOAPClient.sendRequest(SOAPClient.java:284) 
> at pls.soap.client.SOAPClient.handleRequest(SOAPClient.java:143) 
> at pls.soap.client.SOAPClient.processSendJob(SOAPClient.java:101) 
> at 
> pls.soap.client.SendJobProcessorImpl.processSendJob(SendJobProcessorImpl.java:10)
>  
> at ls.osis.server.prot.SendJobQueue.process(SendJobQueue.java:139) 
> at ls.osis.server.prot.SendJobQueue$SendJobTask.run(SendJobQueue.java:108) 
> at 
> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
>  
> at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264) 
> at 
> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
>  
> at 
> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
>  
> at java.base/java.lang.Thread.run(Thread.java:834)
> Caused by: java.lang.ClassNotFoundException: 
> org.apache.axiom.soap.impl.builder.StAXSOAPModelBuilder 
> at 
> java.base/jdk.internal.loader.BuiltinClassLoader.loadClass(BuiltinClassLoader.java:583)
> at 
> java.base/jdk.internal.loader.ClassLoaders$AppClassLoader.loadClass(ClassLoaders.java:178)
>  
> at java.base/java.lang.ClassLoader.loadClass(ClassLoader.java:521) ... 
> 22 more
> {noformat}
>  
>  



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

-
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org



[jira] [Commented] (AXIS2-5857) Log4j 1.x has reached EOL

2022-02-07 Thread PJ Fanning (Jira)


[ 
https://issues.apache.org/jira/browse/AXIS2-5857?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17488336#comment-17488336
 ] 

PJ Fanning commented on AXIS2-5857:
---

[https://logging.apache.org/log4j/2.x/manual/migration.html] has details about 
how to migrate

>  Log4j 1.x has reached EOL
> --
>
> Key: AXIS2-5857
> URL: https://issues.apache.org/jira/browse/AXIS2-5857
> Project: Axis2
>  Issue Type: Improvement
>Affects Versions: 1.7.5
>Reporter: spoorti
>Priority: Minor
>
> The log4j 1.x has reached EOL. Even the latest release version of Axis2 
> contains the 1.x version of the log4j.
> It need to be upgraded to 2.8.2 or higher since the other 2.x versions has 
> vulnerability reported.



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

-
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org



[jira] [Created] (AXIS2-6025) testkit uses log4jv2 version that has CVEs

2022-02-07 Thread PJ Fanning (Jira)
PJ Fanning created AXIS2-6025:
-

 Summary: testkit uses log4jv2 version that has CVEs
 Key: AXIS2-6025
 URL: https://issues.apache.org/jira/browse/AXIS2-6025
 Project: Axis2
  Issue Type: Improvement
Reporter: PJ Fanning


A lot of people are very sensitive about applications that still use versions 
of log4j with CVEs.

v2.14.x used in:

https://github.com/apache/axis-axis2-java-core/blob/master/modules/transport/testkit/pom.xml



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

-
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org



[jira] [Commented] (AXIS2-6025) testkit uses log4jv2 version that has CVEs

2022-02-07 Thread PJ Fanning (Jira)


[ 
https://issues.apache.org/jira/browse/AXIS2-6025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17488351#comment-17488351
 ] 

PJ Fanning commented on AXIS2-6025:
---

I created https://github.com/apache/axis-axis2-java-core/pull/255

> testkit uses log4jv2 version that has CVEs
> --
>
> Key: AXIS2-6025
> URL: https://issues.apache.org/jira/browse/AXIS2-6025
> Project: Axis2
>  Issue Type: Improvement
>Reporter: PJ Fanning
>Priority: Major
>
> A lot of people are very sensitive about applications that still use versions 
> of log4j with CVEs.
> v2.14.x used in:
> https://github.com/apache/axis-axis2-java-core/blob/master/modules/transport/testkit/pom.xml



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

-
To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org
For additional commands, e-mail: java-dev-h...@axis.apache.org