Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Chris, that's a sensible suggestion. The web site is on gihub, any chance you could do a pull request? I'm swamped... https://github.com/geoserver/geoserver.github.io Cheers Andrea On Thu, Jun 7, 2018 at 4:18 PM, Chris Snider wrote: > Andrea, > > > > It took me a second to find the

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Chris Snider
I can try to do that this weekend. I assume master? Chris Snider Senior Software Engineer [cid:image001.png@01D2E6A5.9104F820] From: andrea.a...@gmail.com [mailto:andrea.a...@gmail.com] On Behalf Of Andrea Aime Sent: Thursday, June 07, 2018 8:25 AM To: Chris Snider Cc: Dave Wichers ;

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Mark Prins
On 07-06-18 13:32, Olle Markljung wrote: Hello all I have users that would be helped if curve support for SQL Server became real. I'm not sure if the implementation is needed in GeoServer or GeoTools but I reach out here first. Are there others also seeking this support? Ik had a look

[Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Olle Markljung
Hello all I have users that would be helped if curve support for SQL Server became real. I'm not sure if the implementation is needed in GeoServer or GeoTools but I reach out here first. Are there others also seeking this support? I might be able to do the implementation myself but otherwise

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Andrea Aime
Hi Olle, I did work on the curve support for SQL Server and Oracle, I've built the in memory geometry representation and GML encoding support in the first implementation [1], so believe all you need to do is to add support for parsing curves at the store level, somewhere around here:

[Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Verbeeck Bart (AIV)
Dear List Why is the default outputformat for a wfs (2.0.0) request in version 2.13.1 "Content-Type: application/gml+xml; version=3.2" It used to be (2.11.1 for instance) "Content-Type: text/xml; subtype=gml/3.2" Even if I ask for "text/xml; subtype=gml/3.2", I receive application/gml+xml;

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Olle Markljung
Hehe yeah I understand :) I’ll try to make the estimate myself. /Olle tors 7 juni 2018 kl. 17:28 skrev Andrea Aime : > Hi Olle, > I have them, but we don't discuss estimates outside of private business > inquiries, sorry :-) > That said, estimates are personal, they change depending on

Re: [Geoserver-users] Curve support for SQL Server

2018-06-07 Thread Andrea Aime
Hi Olle, I have them, but we don't discuss estimates outside of private business inquiries, sorry :-) That said, estimates are personal, they change depending on experience, topic and the like, so they would not be much use anyways. If you decide you want someone else to do it for you, you can

Re: [Geoserver-users] outputformat getfeature 2.0.0 (2.13.1)

2018-06-07 Thread Andrea Aime
As far as I remember, the old format was not compliant with the WFS 2.0 OGC specification and got fixed as a consequence. Cheers Andrea On Thu, Jun 7, 2018 at 4:09 PM, Verbeeck Bart (AIV) < bart.verbe...@kb.vlaanderen.be> wrote: > Dear List > > Why is the default outputformat for a wfs (2.0.0)

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Chris Snider
Andrea, It took me a second to find the security block. I completely overlooked the blue field. Maybe add a new header under the “User List” User List This list is for end users blah blah blah Reporting Security Vulnerabilities If you encounter a security vulnerability blah blah blah Posting

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Joe Murphy
Not to try and start a huge discussion; but since the cat is out of the bag so to speak, I also knew of this quite some time(1year+) ago. I don't have the resources to add bugs to the JIRA, but I was able to find/fix locally very easily (what you do with open source). I guess I was wondering if

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Jim, Dave already suggested an approach.. that should not be too hard, maybe setting up a Jenkins build that reports only to the PSC... that's not the problem, it's a one time thing. It's upgrading the libraries that will be trouble, we depend on various old ones, we tried to organize a code

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
Hi Chris, yes, master. Much appreciated! Cheers Andrea On Thu, Jun 7, 2018 at 4:36 PM, Chris Snider wrote: > I can try to do that this weekend. I assume master? > > > > Chris Snider > > Senior Software Engineer > > [image: cid:image001.png@01D2E6A5.9104F820] > > > > *From:*

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Jim Hughes
Hi Joe, The GitHub security alerts seem to only be available for JavaScript and Ruby. Is there a scanner which would work with a Maven/JVM project that you can recommend? Cheers, Jim On 06/07/2018 02:18 PM, Joe Murphy wrote: Not to try and start a huge discussion; but since the cat is

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Joe Murphy
Sounds like you guys have a solution. But, here's some links, one that looks like it could plugin to your Atlassian Suite, and one that looks like it may answer the Maven question that Jim asked. https://techbeacon.com/13-tools-checking-security-risk-open-source-dependencies-0

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread mark
On 06/07/18 22:27, Joe Murphy wrote: https://github.com/jeremylong/DependencyCheck I've been running this Owasp DependencyCheck for about a year on various projects, it can be as easy as adding the following to the travis or jenkins file: mvn org.owasp:dependency-check-maven:aggregate

Re: [Geoserver-users] Geoserver WFS 2.0 combined with app-schema

2018-06-07 Thread Nuno Oliveira
Good point Ben, thanks for the heads up ! On 06/07/2018 01:07 AM, Ben Caradoc-Davies wrote: On 07/06/18 08:37, Nuno Oliveira wrote: Regarding this request you are asking for GML3 ... which implies WFS 1.1.0 and GML 3 schemas. Your target INSPIRE schema uses GML32, so you should request for

[Geoserver-users] Antw: Re: Geoserver WFS 2.0 combined with app-schema

2018-06-07 Thread Tim Balschmiter
Hi Nuno and Ben, thanks for your fast answers - now everything works! And i have understand what "second namespaces" are. thanks a lot. Tim >>> Ben Caradoc-Davies 07.06.2018 02:07 >>> On 07/06/18 08:37, Nuno Oliveira wrote: > Regarding this request you are asking for GML3 ... which implies

Re: [Geoserver-users] Known vulnerability in commons-fileupload v1.2.1, used by geoserver

2018-06-07 Thread Andrea Aime
The comm page, where I believe you found info on registering for the user list, has a clear warning not to post security vulnerabilities: http://geoserver.org/comm/ "If you encounter a security vulnerability in GeoServer please take care to report the issue in a responsible fashion. Do not use

[Geoserver-users] Geoserver mbtiles generation issue

2018-06-07 Thread unni mana
Hello All. when I tried to generate a mntiles using Geoserver WPS request builder tool, I am getting ahe following error "Feature not available." This layer is a geotiff based on. I was told that feature cannot be added since it is geotiff Please correct my understanding. if so. how ca I