Re: Removing Qpid from JMS unit tests

Sounds good to me. Andreas On Wed, Mar 9, 2022 at 3:14 AM robertlazarski wrote: > We support two different ways to run our Axis2 Java JMS unit tests - > active mq, and qpid. > > Qpid is a problem because these tests were written many years ago and the > ancient version used has a log4j 1.x depe

Re: [VOTE] Release Apache Axis2 1.8.2

How is it that the generated site has links to the 1.8.1 and 1.8.2 release notes, although they don't appear in site.xml ( https://github.com/apache/axis-axis2-java-core/blob/v1.8.2/src/site/site.xml#L60 )? Andreas On Sat, Jul 16, 2022 at 4:46 PM Bill Blough wrote: > +1 > > On Fri, Jul 15, 2022

Re: [Axis2] v1.8.2 needed update for CVEs against Jettison 1.5.0 and Spring Framework 5.3.21

I did some investigation. The Axis2 build doesn't work with Maven < 3.6.0. I've updated the minimum required version at HEAD to 3.6.0. Also, there is a problem with the Maven version distributed with RHEL/CentOS (even if it's >= 3.6.0, as in RHEL 9). That's fixed at HEAD now too. Building older Axi

Re: [Axis2] maintenance

Note that we need to decide what the version number for the next release should be. The switch to the Jakarta APIs is a breaking change, so it can't be 1.8.3. If we follow https://semver.org/, then it should actually be 2.0.0. Andreas On Fri, Sep 13, 2024 at 2:10 PM robertlazarski wrote: > An A

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

On Fri, Feb 26, 2021 at 9:45 AM Andrew Marlow wrote: > Hello Robert, thank you for your quick reply. But now there is another > problem: > > I just tried building the latest via git clone and got this weird > permission error: > > Building: AXIS2-5782/pom.xml > The build exited with code 100. See

Re: axis2 git clone owasp build problem with com:sun:tools jar

On Fri, Feb 26, 2021 at 10:19 AM Andrew Marlow wrote: > Hello everyone, > > I am trying to find out what CVE issues there are with axis2. I am using > the owasp maven plugin. With the appropriate plugin section added to the > pom I get a build error: > > [INFO] < org.apache.ax

Re: axis2 1.7.9 is exposed to CVE-2020-8022 via tomcat dependency

Note that the clustering component is optional. You can remove it if you don't need it. Andreas On Sun, Feb 28, 2021 at 10:22 AM Andrew Marlow wrote: > Hello everyone, > > I've discovered that a dependency in the axi2 clustering component makes > axis2 vulnerable to CVE-2020-0822, filed against

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

On Thu, Feb 25, 2021 at 3:37 PM robertlazarski wrote: > Axis2 1.7.9 will not build on JDK 11 for a few reasons such as the removal > of XDoclet. > > The latest Axis2 trunk from our git repo does build on JDK 11 ... maybe > later too, I haven't got to that yet. > > git clone https://github.com/ap

Re: build error with JDK8 to do with permissions

This should be fixed now. Andreas On Wed, Mar 10, 2021 at 1:50 PM Andrew Marlow wrote: > Hello everyone, > > I just did a git clone to get the latest (what will presumably become > 1.8.0) and tried "mvn install". I got the error shown below. I don't get it > when I run the build as root but IMO

Re: what will be 1.8.0 from git clone has several CVEs including one from ant-plugin

Sorry to say it bluntly, but I think this means that the tool you are using is completely braindead. It sees "ant" and "1.8.0" in the JAR file name and believes the artifact is Ant 1.8.0 [1]. Same for taglibs-standard-impl-1.2.5.jar: it sees "tag" and "1.2.5" and then spits out CVEs for https://git

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

ty.AccessController.checkPermission(AccessController.java:886) >>> at java.lang.SecurityManager.checkPermission(SecurityManager.java:549) >>> at >>> com.github.veithen.hermetic.HermeticSecurityManager.checkPermission(HermeticSecurityManager.java:58) >>> at java

Re: [Axis2 Java] Fixing Travis builds

I migrated the build to Github Actions a while ago; see https://github.com/apache/axis-axis2-java-core/actions. Andreas On Mon, May 3, 2021 at 2:56 AM robertlazarski wrote: > All, > > On the URL below: > > https://travis-ci.com/github/apache/axis-axis2-java-core/requests > > I am seeing this er

Re: [Axis] - QUERY regarding the Axis2 1.7.9

On Mon, Feb 14, 2022 at 9:45 AM sahil garg -X (sahigarg - Altran ACT S.A.S at Cisco) wrote: > Hi Axis Team, > > > > For one of our product we are have generated java source code using the > axis-1 lib. Later on we have moved to axis-2 1.3 version. > > Which was working properly with Generated ja

Re: [Axis2] maintenance

I've changed the version number to 2.0.0. Andreas On Mon, Sep 16, 2024 at 6:32 PM robertlazarski wrote: > I've been waiting for some committer consensus on this. I agree with 2.0.0 > . > > On Mon, Sep 16, 2024 at 4:10 AM Andreas Veithen-Knowles < > andreas.veit...

Re: [VOTE] Release Apache Rampart 1.8.0

+1 Thanks, Andreas On Fri, Dec 6, 2024 at 3:47 PM Tom Jordahl wrote: > +1 for the release > > > >- Downloaded the source tar.gz and spot checked some files >- Verified the links listed below > > > > -- > > Tom Jordahl > > > > > > *From: *robertlazarski > *Date: *Sunday, December 1, 20

Re: [VOTE] Release Apache Axis2 2.0.0

+1 Andreas On Fri, Mar 7, 2025 at 7:22 AM Andreas Lehmkühler wrote: > +1 > > Thanks you! > > Andreas > > Am 05.03.25 um 14:39 schrieb robertlazarski: > > Git tag: https://github.com/apache/axis-axis2-java-core/releases/tag/ > > v2.0.0 < > https://github.com/apache/axis-axis2-java-core/releases/

[jira] [Moved] (AXIS2-6096) Attempted read on closed stream for multithreaded environment

[ https://issues.apache.org/jira/browse/AXIS2-6096?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Andreas Veithen-Knowles moved AXIOM-524 to AXIS2-6096: -- Key: AXIS2-6096 (was: AXIOM-524