Re: EXT:Re: EXT:Re: AW: EXT:Re: EXT:Re: Karaf Tooling Maven Plugin produces strange feature file

2022-01-25 Thread Muthuvijayan, Vignesh Kumar
Hi, The attached pom works for me. Additionally the *spring-legacy* repository has been added as a boot repository. Since ActiveMQ 5.16.2 this is required. Related ticket AMQ-8218 and information available here

[SECURITY] New security advisory for CVE-2022-22932

2022-01-25 Thread Jean-Baptiste Onofré
A new security advisory has been released for Apache Karaf, which was fixed in the 4.2.15 and 4.3.6 runtime releases CVE-2022-22932: Path traversal flaws Severity: Low Vendor: The Apache Software Foundation Versions Affected: all versions of Apache Karaf prior to 4.2.15 or 4.3.6 Description:

[SECURITY] New security advisory for CVE-2021-41766 released for Apache Karaf

2022-01-25 Thread Jean-Baptiste Onofré
A new security advisory has been released for Apache Karaf, which was fixed in the recent 4.3.6 runtime release. CVE-2021-41766: Insecure Java Deserialization in Apache Karaf Severity: Low Vendor: The Apache Software Foundation Versions Affected: all versions of Apache Karaf prior to 4.3.6

Re: Configuration cannot be overwritten by environment variable

2022-01-25 Thread Jean-Baptiste Onofré
Hi Oliver, Yes, if you want to see the "actual" values, you have to use config.getProcessedProperties() (containing interpolated values), whereas getProperties() only shows the "original" values. Happy to help ;) Regards JB On 25/01/2022 15:02, Oliver Fürniß wrote: Hi JB, thanks for the

Re: Configuration cannot be overwritten by environment variable

2022-01-25 Thread Oliver Fürniß
Hi JB, thanks for the config:list hint. :-) Looked at the Karaf source code of org.apache.karaf.config.command.ListCommand and it uses "config.getProcessedProperties(null)", but I'm using just config.getProperties() in my code which seems to return the unprocessed values. Problem solved!

Re: Configuration cannot be overwritten by environment variable

2022-01-25 Thread Jean-Baptiste Onofré
Hi Oliver, I think it just works fine but you don't look at right place ;) Actually, when you use the env variable, the config is updated in memory but not in the file. Let me illustrate this: 1. I have a config file etc/org.ops4j.pax.web.cfg containing: org.osgi.service.http.port=8181 2.

Configuration cannot be overwritten by environment variable

2022-01-25 Thread Oliver Fürniß
Greetings, I try to overwrite a configuration (Karaf 4.3.3) by using environment variables like mentioned in the Karaf documentation: https://svn.apache.org/repos/asf/karaf/site/production/manual/latest/configuration.html It works fine for simple names like `sshPort`, but fails when the variable