Re: [DISCUSS] RMI support in Jackrabbit

2024-02-11 Thread Julian Reschke
On 18.09.2023 13:50, Julian Reschke wrote: ... Update...: - RMI is disabled by default now (https://issues.apache.org/jira/browse/JCR-4960) - all of RMI is deprecated and marked for removal in 2.22.x (https://issues.apache.org/jira/browse/JCR-4973, https://issues.apache.org/jira/browse/JCR-49

AW: [DISCUSS] RMI support in Jackrabbit

2023-09-18 Thread KÖLL Claus via dev
+1 on deprecating. our stopper of removing it is JCR-4954 greets claus

Re: [DISCUSS] RMI support in Jackrabbit

2023-09-18 Thread Woonsan Ko
On Mon, Sep 18, 2023 at 8:50 PM Julian Reschke wrote: > > To whom it may concern... > > Jackrabbit's RMI support has been essentially unmaintained for half a > decade now, and also does not support JCR 2.0. > > We recently had to go into emergence mode due to vulnerabilities of > components used b

[DISCUSS] RMI support in Jackrabbit

2023-09-18 Thread Julian Reschke
To whom it may concern... Jackrabbit's RMI support has been essentially unmaintained for half a decade now, and also does not support JCR 2.0. We recently had to go into emergence mode due to vulnerabilities of components used by us when accessed over RMI (see https://nvd.nist.gov/vuln/detail/CV