Great !!
Thanks for the info Robert
From: robertlazarski
Sent: Monday, April 19, 2021 6:47 PM
To: java-user@axis.apache.org
Subject: Re: Axis2 1.8.0 Release timelines
Thanks for mentioning CVE-2020-0822.
We discussed this problem last month on the axis2 dev list. The clustering
component depen
Thanks for mentioning CVE-2020-0822.
We discussed this problem last month on the axis2 dev list. The clustering
component depends on Tomcat Tribes - a decision made many years ago.
We upgraded those Tomcat deps in git from 6.0.53 to 10.0.2. We now have
GitHub Dependabot enabled for auto pull requ
Thanks Robert!! For your response.
We are facing issue with one issue which you have mentioned i.e., AXIS2-5959.
And also facing issue with one of the security vulnerability in Axis2 1.7.9 :
CVE-2020-0822.
From: robertlazarski
Sent: Monday, April 19, 2021 6:08 PM
To: java-user@axis.apache.org
We are wrapping up the release now. We are volunteers so it's hard to say
exactly when the release will be.
The largest hurdle has been AXIS2-5959 regarding the complete removal of
commons httpclient 3.x.
I did a lot of coding in the last week on this. All that is remaining is
some doc updates an
