Re: TomEE 8 Release Preview

2018-10-23 Thread dkwakkel
I was also planning to use Plus and expected micro profile being part of it. We don't see that our customers maintain their own distro. We just instruct them how to download/install tomee. Could you reconsider making microprofile part of Plus? -- Sent from:

Re: TomEE 8 Release Preview

2018-11-13 Thread dkwakkel
@Roberto: Thanks, if I can help somehow please let me know. -- Sent from: http://tomee-openejb.979440.n4.nabble.com/TomEE-Dev-f982480.html

Re: TomEE 8 Release Preview

2018-11-12 Thread dkwakkel
@Roberto Cortez: I do not see Microprofile added to plus in trunk yet, hope it will make it? After that maybe change http://tomee.apache.org/comparison.html to have a row for MicroProfile so it is clear in which versions it is included. -- Sent from:

openejb.classloader.forced-load = javax.ws.rs breaks jaxrs endpoints

2019-09-18 Thread dkwakkel
When deploying a jaxrs war (attached) with openejb.classloader.forced-load = javax.ws.rs set in conf/system.properties war deployment goes fine but the test endpoint http://localhost:8080/w/test returns a 404. When removing this property it is working fine again (I need to add the property to

Re: openejb.classloader.forced-load = javax.ws.rs breaks jaxrs endpoints

2019-09-18 Thread dkwakkel
I know. Only I do not understand when even when the attached w.war is the only war still setting the property breaks it. I thought it will only make webapp jaxrs loading first, but because there is no jaxrs implemented included in w.war it falls back to the tomee provided one. And indeed no errors

CVE-2020-8840 on TomEE 8.0.1

2020-03-11 Thread dkwakkel
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. 8.0.1 ships jackson-databind-2.10.0.jar and xbean-reflect-4.14.jar CVE score is 9.8, so can we expect soon TomEE 8.0.2 with this fix in

Re: CVE-2020-8840 on TomEE 8.0.1

2020-03-11 Thread dkwakkel
Indeed, I misread the version, sorry. -- Sent from: http://tomee-openejb.979440.n4.nabble.com/TomEE-Dev-f982480.html