Re: [VOTE] Release Apache Axis2 1.8.0

2021-08-02 Thread Andrew Marlow
+1 regards andrew marlow http://www.andrewpetermarlow.co.uk On Mon, 2 Aug 2021, 01:37 robertlazarski, wrote: > This is a vote to release Apache Axis2 1.8.0 > > Git tag: > https://github.com/apache/axis-axis2-java-core/releases/tag/v1.8.0 > > Distributions: > https://dist.

Re: when will axis2 version 1.8.0 be released

2021-04-20 Thread Andrew Marlow
in the next couple weeks. > > Once that gets settled, in order to release we'd need a vote on this list > with at least 3 +1 votes and no -1 votes. > > > > On Thu, Mar 18, 2021 at 11:13 PM Andrew Marlow > wrote: > >> Hello everyone, >> >> When wil

when will axis2 version 1.8.0 be released

2021-03-19 Thread Andrew Marlow
Hello everyone, When will 1.8.0 be ready? I am anticipating the recent security fixes that have been made by advancing the version number of various component dependencies. What other things are planned for the release please? -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

xmlbeans 2.6.0 and CVE-2021-23926

2021-03-12 Thread Andrew Marlow
anges. I think 3.0.1 should be safe, hopefully. -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: [jira] [Commented] (AXIS2-5996) Axis contains a vulnerable dependecy

2021-03-11 Thread Andrew Marlow
che Client 4.5.3 which is vulnerable to > CVE-2020-13956 > > > > -- > This message was sent by Atlassian Jira > (v8.3.4#803005) > > - > To unsubscribe, e-mail: java-dev-unsubscr...@axis.apache.org > For additional commands, e-mail: java-dev-h...@axis.apache.org > > -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

what will be 1.8.0 from git clone has several CVEs including one from ant-plugin

2021-03-11 Thread Andrew Marlow
/org.apache.xmlbeans/xmlbeans@2.6.0, cpe:2.3:a:apache:xmlbeans:2.6.0:*:*:*:*:*:*:*) : CVE-2021-23926 -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

build error with JDK8 to do with permissions

2021-03-10 Thread Andrew Marlow
uncher.mainWithExitCode(Launcher.java:381) at org.codehaus.plexus.classworlds.launcher.Launcher.main(Launcher.java:347) -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

axis2, tomcat tribes and artifact relocation

2021-03-09 Thread Andrew Marlow
, 10.0.2. I know this has a CVE as well, CVE-2021-25329, but that has only very recently been filed. I'm sure that there will be a version after 10.0.2 that addresses it. What do people think about moving over to version 10.0.2 please? -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: Outstanding items for the next Axis2 release

2021-03-08 Thread Andrew Marlow
2 setup is harder > than it should be. Just like to know if anyone is using Axis2 in spring > boot. > > Regards, > Robert > -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-03-07 Thread Andrew Marlow
removal of XDoclet. >>> >>> The latest Axis2 trunk from our git repo does build on JDK 11 ... maybe >>> later too, I haven't got to that yet. >>> >>> git clone https://github.com/apache/axis-axis2-java-core.git >>> >>> Currentl

Re: axis2 1.7.9 is exposed to CVE-2020-8022 via tomcat dependency

2021-03-07 Thread Andrew Marlow
clustering component is optional. You can remove it if you > don't need it. > > Andreas > > On Sun, Feb 28, 2021 at 10:22 AM Andrew Marlow > wrote: > >> Hello everyone, >> >> I've discovered that a dependency in the axi2 clustering component makes >

axis2 1.7.9 is exposed to CVE-2020-8022 via tomcat dependency

2021-02-28 Thread Andrew Marlow
mpile INFO [m] | +- org.apache.tomcat:tribes:jar:6.0.53:compile INFO [m] | \- org.apache.tomcat:juli:jar:6.0.53:compile I don't understand why axis2 depends on tomcat. Can someone explain please? -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread Andrew Marlow
-http:jar:tests:1.8.0-SNAPSHOT in apache.snapshots (https://repository.apache.org/snapshots) I am not a mint user however the /var/log/auth* or /var/log/secure* logs > may have some clues. Axis2 builds fine for me on Centos 7 and OpenSuse. > -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread Andrew Marlow
n/m2.conf, a file to which everyone has read access. I've also updated the jre java security policy config to give everyone read access to this file. It makes no difference. > On Thu, Feb 25, 2021 at 11:45 PM Andrew Marlow > wrote: > >> Hello Robert, thank you for your quick reply

axis2 1.7.9 CVEs as reported by owasp: still using log4j version 1 and spring framework 2.5.1

2021-02-26 Thread Andrew Marlow
Plugin spring-core-2.5.1 Apache Axis2 - spring -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

axis2 git clone owasp build problem with com:sun:tools jar

2021-02-26 Thread Andrew Marlow
error please? -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk

Re: trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-26 Thread Andrew Marlow
ood reason not to bump the source requirement up to > 1.8 so if there are no objections on this list I suggest we do that. > > > On Thu, Feb 25, 2021 at 4:12 AM Andrew Marlow > wrote: > >> Hello everyone, >> >> I just tried to build axis2 1.7.9 on linux with openJDK1

trouble building top level axis2 with jdk11 with source and target set to jdk1.8

2021-02-25 Thread Andrew Marlow
is removed in JDK11. Does this mean that axis2 must be built in older versions, e.g. 1.8? -- Regards, Andrew Marlow http://www.andrewpetermarlow.co.uk