Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

Yes Le 10 oct. 2017 21:21, "Matthew Broadhead" a écrit : > ok i cloned and built. but what am i supposed to do? remove all xalan > refs? > > On 10/10/2017 19:10, Romain Manni-Bucau wrote: > >> If I'm not mistaken this should be up to date >>

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

ok i cloned and built.  but what am i supposed to do? remove all xalan refs? On 10/10/2017 19:10, Romain Manni-Bucau wrote: If I'm not mistaken this should be up to date http://tomcat.apache.org/taglibs/site/building.html Romain Manni-Bucau @rmannibucau |

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

If I'm not mistaken this should be up to date http://tomcat.apache.org/taglibs/site/building.html Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

is that something i can take a look at? is it in openejb? On 10/10/2017 18:21, Romain Manni-Bucau wrote: Yes fix taglib as identified since last year ;) Le 10 oct. 2017 16:05, "Matthew Broadhead" a écrit : is there a cure for this? we previously tried to

Re: Could TomEE 7.0.5

Pushed it earlier, deploying snapshots now: https://github.com/apache/tomee/commit/bdd41eb48076b370c07386c801049b17fca2 :-) Cheers Jon On Tue, Oct 10, 2017 at 5:56 PM, Alex The Rocker wrote: > Hello, > > While checking latest TomEE 7.0.5, I noticed that it's based

Could TomEE 7.0.5

Hello, While checking latest TomEE 7.0.5, I noticed that it's based on Tomcat 8.5.21. I recently received the following CVE alert with impacts Tomcat 8.5.x until Tomcat 8.5.22: [SECURITY] CVE-2017-12617 Apache Tomcat Remote Code Execution via JSP upload I see that it is fixed in Tomcat 8.5.23:

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

Hello All, Thank you very much, with your answers I was able to both: * Update my Arquilian tomee embedded-based tests to lastest TomEE 7.0.5 Snapshot * Download binary artifacts of latest TomEE 7.0.5 Best regards, Alexandre 2017-10-10 18:33 GMT+02:00 Romain Manni-Bucau :

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

small typo: actual snapshot repo is repository.apache.org/snapshots/, not central Romain Manni-Bucau @rmannibucau | Blog | Old Blog | Github | LinkedIn

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

The deploy bot is here https://ci.apache.org/builders/tomee-trunk-deploy It was hung a while back, but as you can see it has been fine recently - This means that the 7.0.5-SNAPSHOT should be in maven central nightly. The snapshot versions are not linked on the TomEE site, as that is not allowed.

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

Yes fix taglib as identified since last year ;) Le 10 oct. 2017 16:05, "Matthew Broadhead" a écrit : > is there a cure for this? we previously tried to exclude other versions > of xalan from the pom but it didn't work > > On 10/10/2017 16:33, Romain Manni-Bucau

Re: [VOTE] Apache TomEE 1.7.5

Thanks Jon! Anyone else managed to test this yet? Appreciate your time ;-) Andy. On 10/10/17 03:18, Jonathan Gallimore wrote: +1 On Wed, Sep 27, 2017 at 12:27 PM, Andy Gumbrecht wrote: Hi Everyone, I'd kindly like to ask you all to take a look at this build and

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

is there a cure for this?  we previously tried to exclude other versions of xalan from the pom but it didn't work On 10/10/2017 16:33, Romain Manni-Bucau wrote: Yep It is one of the reasons why we dont want xalan in tomee lib folder - fop is not particular since xalan is very common Le 10

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

Yep It is one of the reasons why we dont want xalan in tomee lib folder - fop is not particular since xalan is very common Le 10 oct. 2017 15:03, "Matthew Broadhead" a écrit : > with 7.0.4 i am getting this > java.lang.ClassCastException:

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2 [PASSED]

And here my late +1. All internal tests and apps r still running. txs for rolling the release train! LieGrue, strub > Am 09.10.2017 um 22:39 schrieb Andy Gumbrecht : > > OK folks, that's a wrap. Three binding votes close this one and we'll release. > > Any issues will now go

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2

with 7.0.4 i am getting this java.lang.ClassCastException: org.apache.xml.dtm.ref.DTMManagerDefault cannot be cast to org.apache.xml.dtm.DTMManager     at org.apache.xml.dtm.DTMManager.newInstance(DTMManager.java:137)     at org.apache.xpath.XPathContext.(XPathContext.java:102)     at

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

Think you need asf snapshot repo @Jon: did you get a chance to check why our daily deployment fails? Le 10 oct. 2017 13:45, "Jonathan Gallimore" a écrit : > Good shout. Let me deploy the latest snapshot for you. Then you should just > need to use 7.0.5-SNAPSHOT as

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

Hello Jonathan, Thank you very much, I'll use it as soon as it's available. Any idea when it could be available for maven? What would be the path of 7.0.5 snapshot binaries of the standalone usual tomee-plus / tomee-jaxrs, etc ? Best regards, Alexandre 2017-10-10 14:45 GMT+02:00 Jonathan

Re: "How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

Good shout. Let me deploy the latest snapshot for you. Then you should just need to use 7.0.5-SNAPSHOT as your version number, and you shouldn't need the . Jon On Tue, Oct 10, 2017 at 1:39 PM, Alex The Rocker wrote: > Hello, > > I saw that work on TomEE 7.0.5 already

"How to test latest TomEE 7.0.5 snapshots (w or without Arquilian) ?"

Hello, I saw that work on TomEE 7.0.5 already began, with an upgrade of Tomcat dependency, which is good because this newer Tomcat fixes couple of CVEs. I'd like starting to test our webapps agains latest TomEE 7.0.5 builds. Questions: * Where can I find TomEE 7.0.5 binary artifacts in order to

Re: [VOTE] Apache TomEE 1.7.5

+1 On Wed, Sep 27, 2017 at 12:27 PM, Andy Gumbrecht wrote: > Hi Everyone, > > I'd kindly like to ask you all to take a look at this build and place your > votes for a 1.7.5 release. > This version includes org.apache.tomee.patch CXF 2.6.17-TomEE, a backport > fix for

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2 [RESULT][PASSED]

ok i have sent to us...@tomee.apache.org On 09/10/2017 23:26, Andy Gumbrecht wrote: For the list... On 28/09/17 01:01, Matthew Broadhead wrote: This has just reminded me that i am currently stuck on java-1.8.0-openjdk-1.8.0.131-11.b12.el7.x86_64 on CentOS 7 with TomEE 7.0.3 updating to

Re: [VOTE] Apache TomEE 7.0.4 - Roll 2 [PASSED]

Thanks Andy.  7.0.4 is running fine on my development machine so far +1 On 09/10/2017 22:39, Andy Gumbrecht wrote: OK folks, that's a wrap. Three binding votes close this one and we'll release. Any issues will now go out in the next release. Thanks guys. +1 Alexandre (Alex The Rocker)