[ANNOUNCE] Apache Camel Kamelets 0.6.0 released

2022-01-03 Thread Andrea Cosentino
The Camel PMC is pleased to announce the release of Apache Camel Kamelets 0.6.0. Apache Camel is an open source integration framework that empowers you to quickly and easily integrate various systems consuming or producing data. This release contains a new set of kamelets and bug fixes. The rele

Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Francois Papon
Hi, The Camel elasticsearch-rest-component depend on the version 7.10.2 of elasticsearch-client that has a dependency on log4j-core:2.13.3 and log4j-api:2.13.3 When installating the Karaf feature the log4j bundles are installed: https://github.com/apache/camel-karaf/blob/e976acc7c1d6405b283f

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Andrea Cosentino
Elasticsearch high level client and all the related stuff changed their license after 7.10.2 As far as I know is not compatible with ASF License. This is the reason is not updated. Il giorno lun 3 gen 2022 alle ore 16:27 Francois Papon < francois.pa...@openobject.fr> ha scritto: > Hi, > > The C

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Francois Papon
Ok, so just updating the feature should be enought. On 03/01/2022 16:29, Andrea Cosentino wrote: Elasticsearch high level client and all the related stuff changed their license after 7.10.2 As far as I know is not compatible with ASF License. This is the reason is not updated. Il giorno lun 3

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Andrea Cosentino
No, the installation will fail if you update the feature without upgrading elasticsearch bundle. We cannot update the ES bundle for the license problem. Il giorno lun 3 gen 2022 alle ore 16:31 Francois Papon < francois.pa...@openobject.fr> ha scritto: > Ok, so just updating the feature should be

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Francois Papon
The range of the import package is org.apache.logging.log4j;version="[2.8,4)" in the servicemix bundle so it should work if we only upgrade log4j version no? May be I missed somethings. On 03/01/2022 16:33, Andrea Cosentino wrote: No, the installation will fail if you update the feature witho

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Andrea Cosentino
If you run a full feature install like we do in camel-karaf it will fail. This the only test i've done around ES feature Il lun 3 gen 2022, 16:46 Francois Papon ha scritto: > The range of the import package is > org.apache.logging.log4j;version="[2.8,4)" in the servicemix bundle so > it should

Re: Karaf/Camel camel-elasticsearch-rest component and Log4jShell

2022-01-03 Thread Francois Papon
I will made some tests on camel-karaf main branch because I made it work on a custom Karaf distribution by adding blacklisted bundle. However I don't install all the features but it's weird because in the feature.xml of camel-karaf, only the elasticsearch feature depend on log4j. On 03/01/202

Camel load resource from classloader broken

2022-01-03 Thread Francois Papon
Hi, It seems like this commit broke the OSGi compatibility by loading resources from another classloader: https://github.com/apache/camel/commit/11bd8012743868712904b449024344bcf8130d2b#diff-8514339d35970f5c1e68df154846a293656b9a482d332b7f4423755ba0d2b0f9 For example, when upgrading to Camel

Re: Camel load resource from classloader broken

2022-01-03 Thread Jean-Baptiste Onofré
Hi François, thanks for pointing this. That's a *huge* regression impacting camel-karaf. Definitely we have to fix that (I consider this regression as blocker/critical). Can you create a Jira about that, I will fix that ? Thanks, Regards JB On 03/01/2022 17:35, Francois Papon wrote: Hi, I

Re: Camel load resource from classloader broken

2022-01-03 Thread Francois Papon
Hi JB, Sure, here the Jira: https://issues.apache.org/jira/browse/CAMEL-17425 Thanks for your help! Regards, François On 03/01/2022 18:06, Jean-Baptiste Onofré wrote: Hi François, thanks for pointing this. That's a *huge* regression impacting camel-karaf. Definitely we have to fix that (I