Re: Security vulnerabilities in Axis2 dependencies? "tribes" & "juli" JAR files

2018-08-06 Thread Andreas Veithen
These libraries are dependencies of axis2-clustering. Are you using the clustering support? Andreas On Mon, Aug 6, 2018 at 11:13 AM axis2user82 wrote: > > Hi > > Sorry if you are getting this mail twice, but I sent it before having > finished subscribing, so I was unsure if it reached the

Re: Security vulnerabilities in Axis2 dependencies? "tribes" & "juli" JAR files

2018-08-06 Thread Andreas Veithen
On Mon, Aug 6, 2018 at 1:21 PM Martin H wrote: > > Hi Andreas > > I don't think so - we have a load balancer (Netscaler) in front of the > solution that handles the distribution to the nodes running the application > which uses Axis2. But no clustering/load-balancing that Axis2 is aware of. Is

Security vulnerabilities in Axis2 dependencies? "tribes" & "juli" JAR files

2018-08-06 Thread axis2user82
Hi Sorry if you are getting this mail twice, but I sent it before having finished subscribing, so I was unsure if it reached the list. We have recently integrated the OWASP Dependency Checker into our CI-setup, and it has flagged two libraries as potentially problematic (i.e. affected by

Re: Security vulnerabilities in Axis2 dependencies? "tribes" & "juli" JAR files

2018-08-06 Thread Martin H
Hi Andreas I don't think so - we have a load balancer (Netscaler) in front of the solution that handles the distribution to the nodes running the application which uses Axis2. But no clustering/load-balancing that Axis2 is aware of. Is there a way to determine for sure if it is enabled/disabled?