You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by sm...@apache.org on 2017/11/16 01:42:04 UTC

directory-fortress-enmasse git commit: FC-228 - CVE-2017-12624: Apache CXF web services that process attachments are vulnerable to DoS attacks

Repository: directory-fortress-enmasse
Updated Branches:
  refs/heads/master 9379ac661 -> df8e3a914


FC-228 - CVE-2017-12624: Apache CXF web services that process attachments are vulnerable to DoS attacks


Project: http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/repo
Commit: http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/commit/df8e3a91
Tree: http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/tree/df8e3a91
Diff: http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/diff/df8e3a91

Branch: refs/heads/master
Commit: df8e3a9142358b2767be28af9d3d5ed61c49dca1
Parents: 9379ac6
Author: Shawn McKinney <sm...@apache.org>
Authored: Wed Nov 15 19:42:00 2017 -0600
Committer: Shawn McKinney <sm...@apache.org>
Committed: Wed Nov 15 19:42:00 2017 -0600

----------------------------------------------------------------------
 pom.xml                                        | 2 +-
 src/main/resources/fortress.properties.example | 4 +---
 src/main/resources/log4j.xml                   | 2 +-
 3 files changed, 3 insertions(+), 5 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/blob/df8e3a91/pom.xml
----------------------------------------------------------------------
diff --git a/pom.xml b/pom.xml
index ff5b0c5..77a2bb9 100755
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
     
     <!-- Dependencies version -->
     <fortress.realm.version>2.0.0</fortress.realm.version>
-    <cxf.version>3.1.8</cxf.version>
+    <cxf.version>3.2.1</cxf.version>
     <httpclient.version>3.1</httpclient.version>
     <java.version>1.8</java.version>
     <javadoc.version>2.9.1</javadoc.version>

http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/blob/df8e3a91/src/main/resources/fortress.properties.example
----------------------------------------------------------------------
diff --git a/src/main/resources/fortress.properties.example b/src/main/resources/fortress.properties.example
index e804c8e..1569261 100644
--- a/src/main/resources/fortress.properties.example
+++ b/src/main/resources/fortress.properties.example
@@ -56,14 +56,12 @@ config.realm=DEFAULT
 config.root=ou=Config,dc=example,dc=com
 
 # enable this to see trace statements when connection pool allocates new connections:
-debug.ldap.pool=true
+debug.ldap.pool=false
 
 # Default for pool reconnect flag is false:
 enable.pool.reconnect=true
 
 ehcache.config.file=ehcache.xml
-#role1=admin
-#role2=role1
 
 # If for any reason echcache must be DISABLED for DSD, make sure this parameter is set to 'true' which is the default.  Otherwise performance penalty will be incurred during multi-role activations.
 disable.dsd.cache=false
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/directory-fortress-enmasse/blob/df8e3a91/src/main/resources/log4j.xml
----------------------------------------------------------------------
diff --git a/src/main/resources/log4j.xml b/src/main/resources/log4j.xml
index fbaf14f..00f9e06 100644
--- a/src/main/resources/log4j.xml
+++ b/src/main/resources/log4j.xml
@@ -43,7 +43,7 @@
 
 <!--
     <category name="org.apache.directory.fortress" class="org.apache.log4j.Logger" additivity="false">
-        <priority value="INFO" class="org.apache.log4j.Level"/>
+        <priority value="DEBUG" class="org.apache.log4j.Level"/>
         <appender-ref ref="console"/>
     </category>
 -->