The Apache Axis team is pleased to announce the release of Apache Axis2/Java 2.0.2.
This release is primarily a security hardening release, and all users are encouraged to upgrade. Several defaults now refuse what they previously allowed, so please read the "Upgrading from 2.0.1" section of the release notes before deploying. In short: - Decoupled WS-Addressing responses (non-anonymous ReplyTo/FaultTo) are refused unless allowNonAnonymousResponseEndpoints is set to true. - Selecting a service from the SOAP body namespace is off unless allowContentBasedServiceDispatch is set to true. - The admin console ships with empty credentials and is disabled until userName and password are set in your own axis2.xml. - Request bodies (multipart, form, MTOM/SwA, SOAP, JSON) now have configurable size ceilings. - exposeServiceMetadata is honoured on every anonymous metadata route. Other changes: axis2-spring no longer brings Spring onto your classpath, the JMS and mail transports are no longer bundled in axis2.war (both remain in the binary distribution), axis2.war shrinks from 36 MB to 30 MB, and the mail transport is deprecated for removal in 2.0.3. If you use the mail transport, please let us know on java-dev. Release notes: https://axis.apache.org/axis2/java/core/release-notes/2.0.2.html Downloads: https://axis.apache.org/axis2/java/core/download.html Maven artifacts are available from Maven Central under the org.apache.axis2 group id, version 2.0.2. Thanks to everyone who contributed fixes, reviews and votes for this release. Robert Lazarski on behalf of the Apache Axis PMC --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
