You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@karaf.apache.org by Jean-Baptiste Onofré <jb...@nanthrax.net> on 2011/09/08 11:07:34 UTC
[DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Hi all,
following our previous discussion around Camel and CXF, I would like:
- to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
- release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
3.0.5.RELEASE
- let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
WDYT ?
Regards
JB
--
Jean-Baptiste Onofré
jbonofre@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Daniel Kulp <dk...@apache.org>.
On Thursday, September 08, 2011 1:50:53 PM Achim Nierbeck wrote:
> Hi,
>
> I'd rather stay with 3.0.6 since it's a patch release.
> Didn't Camel and CXF plan on supporting version ranges for this ?
> Right now I'm quite astonished that both are bound to the patch level.
> Or is this just me?
Going FORWARD, CXF and Camel will be using version ranges to isolate
themselves a bit from this. The problem is the previous releases that were
not using the ranges properly.
Dan
>
> just my 2 cents here.
>
> Regards, Achim
>
> 2011/9/8 Jean-Baptiste Onofré <jb...@nanthrax.net>:
> > True, I think it's the easiest way, but we really have to document/warn
> > about CXF 2.4.2 and Camel 2.8.x will not work on Karaf 2.2.3 out of the
> > box.
> >
> > My question is:
> > - do we rollback Spring version ?
> > - do we stay with Spring 3.0.6, I'm fine with that, but we have to
> > really
> > document/warn the users about the impact of this update
> >
> > Regards
> > JB
> >
> > On 09/08/2011 12:31 PM, Andreas Pieber wrote:
> >> I've though we've settled with staying with Spring 3.0.6.RELEASE and
> >> cxf/camel upgrade?
> >>
> >> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré<jb...@nanthrax.net>
> >>
> >> wrote:
> >>> Hi all,
> >>>
> >>> following our previous discussion around Camel and CXF, I would
> >>> like:
> >>>
> >>> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
> >>> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
> >>> 3.0.5.RELEASE
> >>> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
> >>>
> >>> WDYT ?
> >>>
> >>> Regards
> >>> JB
> >>> --
> >>> Jean-Baptiste Onofré
> >>> jbonofre@apache.org
> >>> http://blog.nanthrax.net
> >>> Talend - http://www.talend.com
> >
> > --
> > Jean-Baptiste Onofré
> > jbonofre@apache.org
> > http://blog.nanthrax.net
> > Talend - http://www.talend.com
--
Daniel Kulp
dkulp@apache.org
http://dankulp.com/blog
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Hi Achim,
my concern is more about the previous CXF and Camel versions.
I submitted a patch to CXF, and CXF 2.4.3 will be fully supported.
For Camel, I commited a fix to better use of Karaf Spring features, but
it's for Camel 2.9.0 (trunk currently), not for previous Camel releases.
That's why we have to really warn the users about that: if you try to
install CXF <= 2.4.2 or Camel <=2.9.0 on Karaf 2.2.3, we may have issues.
Regards
JB
On 09/08/2011 01:50 PM, Achim Nierbeck wrote:
> Hi,
>
> I'd rather stay with 3.0.6 since it's a patch release.
> Didn't Camel and CXF plan on supporting version ranges for this ?
> Right now I'm quite astonished that both are bound to the patch level.
> Or is this just me?
>
> just my 2 cents here.
>
> Regards, Achim
>
> 2011/9/8 Jean-Baptiste Onofré<jb...@nanthrax.net>:
>> True, I think it's the easiest way, but we really have to document/warn
>> about CXF 2.4.2 and Camel 2.8.x will not work on Karaf 2.2.3 out of the box.
>>
>> My question is:
>> - do we rollback Spring version ?
>> - do we stay with Spring 3.0.6, I'm fine with that, but we have to really
>> document/warn the users about the impact of this update
>>
>> Regards
>> JB
>>
>> On 09/08/2011 12:31 PM, Andreas Pieber wrote:
>>>
>>> I've though we've settled with staying with Spring 3.0.6.RELEASE and
>>> cxf/camel upgrade?
>>>
>>> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré<jb...@nanthrax.net>
>>> wrote:
>>>
>>>> Hi all,
>>>>
>>>> following our previous discussion around Camel and CXF, I would like:
>>>>
>>>> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
>>>> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
>>>> 3.0.5.RELEASE
>>>> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
>>>>
>>>> WDYT ?
>>>>
>>>> Regards
>>>> JB
>>>> --
>>>> Jean-Baptiste Onofré
>>>> jbonofre@apache.org
>>>> http://blog.nanthrax.net
>>>> Talend - http://www.talend.com
>>>>
>>>
>>
>> --
>> Jean-Baptiste Onofré
>> jbonofre@apache.org
>> http://blog.nanthrax.net
>> Talend - http://www.talend.com
>>
>
>
>
--
Jean-Baptiste Onofré
jbonofre@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Achim Nierbeck <bc...@googlemail.com>.
Hi,
I'd rather stay with 3.0.6 since it's a patch release.
Didn't Camel and CXF plan on supporting version ranges for this ?
Right now I'm quite astonished that both are bound to the patch level.
Or is this just me?
just my 2 cents here.
Regards, Achim
2011/9/8 Jean-Baptiste Onofré <jb...@nanthrax.net>:
> True, I think it's the easiest way, but we really have to document/warn
> about CXF 2.4.2 and Camel 2.8.x will not work on Karaf 2.2.3 out of the box.
>
> My question is:
> - do we rollback Spring version ?
> - do we stay with Spring 3.0.6, I'm fine with that, but we have to really
> document/warn the users about the impact of this update
>
> Regards
> JB
>
> On 09/08/2011 12:31 PM, Andreas Pieber wrote:
>>
>> I've though we've settled with staying with Spring 3.0.6.RELEASE and
>> cxf/camel upgrade?
>>
>> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré<jb...@nanthrax.net>
>> wrote:
>>
>>> Hi all,
>>>
>>> following our previous discussion around Camel and CXF, I would like:
>>>
>>> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
>>> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
>>> 3.0.5.RELEASE
>>> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
>>>
>>> WDYT ?
>>>
>>> Regards
>>> JB
>>> --
>>> Jean-Baptiste Onofré
>>> jbonofre@apache.org
>>> http://blog.nanthrax.net
>>> Talend - http://www.talend.com
>>>
>>
>
> --
> Jean-Baptiste Onofré
> jbonofre@apache.org
> http://blog.nanthrax.net
> Talend - http://www.talend.com
>
--
--
*Achim Nierbeck*
Apache Karaf <http://karaf.apache.org/> Committer & PMC
OPS4J Pax Web <http://wiki.ops4j.org/display/paxweb/Pax+Web/>
Committer & Project Lead
blog <http://notizblog.nierbeck.de/>
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
True, I think it's the easiest way, but we really have to document/warn
about CXF 2.4.2 and Camel 2.8.x will not work on Karaf 2.2.3 out of the box.
My question is:
- do we rollback Spring version ?
- do we stay with Spring 3.0.6, I'm fine with that, but we have to
really document/warn the users about the impact of this update
Regards
JB
On 09/08/2011 12:31 PM, Andreas Pieber wrote:
> I've though we've settled with staying with Spring 3.0.6.RELEASE and
> cxf/camel upgrade?
>
> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré<jb...@nanthrax.net> wrote:
>
>> Hi all,
>>
>> following our previous discussion around Camel and CXF, I would like:
>>
>> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
>> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
>> 3.0.5.RELEASE
>> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
>>
>> WDYT ?
>>
>> Regards
>> JB
>> --
>> Jean-Baptiste Onofré
>> jbonofre@apache.org
>> http://blog.nanthrax.net
>> Talend - http://www.talend.com
>>
>
--
Jean-Baptiste Onofré
jbonofre@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Jean-Baptiste Onofré <jb...@nanthrax.net>.
Got it guys, I will really warn and document this update for end-users.
Regards
JB
On 09/08/2011 01:29 PM, Daniel Kulp wrote:
> On Thursday, September 08, 2011 12:31:33 PM Andreas Pieber wrote:
>> I've though we've settled with staying with Spring 3.0.6.RELEASE and
>> cxf/camel upgrade?
>
> +1
>
> The 3.0.6 changelog includes a couple security vulnerabilities (including an
> XSS one) . There aren't any details in the changelog, but I'm very
> uncomfortable shipping things with known public security issues. Since it's a
> patch, I see no issue with it. It should be less of an issue than upgrading
> from Jetty 7.3.x to 7.4.x that was done in Karaf 2.2.1.
>
> Dan
>
>
>
>>
>> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré<jb...@nanthrax.net> wrote:
>>> Hi all,
>>>
>>> following our previous discussion around Camel and CXF, I would like:
>>>
>>> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
>>> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
>>> 3.0.5.RELEASE
>>> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
>>>
>>> WDYT ?
>>>
>>> Regards
>>> JB
>>> --
>>> Jean-Baptiste Onofré
>>> jbonofre@apache.org
>>> http://blog.nanthrax.net
>>> Talend - http://www.talend.com
--
Jean-Baptiste Onofré
jbonofre@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Daniel Kulp <dk...@apache.org>.
On Thursday, September 08, 2011 12:31:33 PM Andreas Pieber wrote:
> I've though we've settled with staying with Spring 3.0.6.RELEASE and
> cxf/camel upgrade?
+1
The 3.0.6 changelog includes a couple security vulnerabilities (including an
XSS one) . There aren't any details in the changelog, but I'm very
uncomfortable shipping things with known public security issues. Since it's a
patch, I see no issue with it. It should be less of an issue than upgrading
from Jetty 7.3.x to 7.4.x that was done in Karaf 2.2.1.
Dan
>
> On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
> > Hi all,
> >
> > following our previous discussion around Camel and CXF, I would like:
> >
> > - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
> > - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
> > 3.0.5.RELEASE
> > - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
> >
> > WDYT ?
> >
> > Regards
> > JB
> > --
> > Jean-Baptiste Onofré
> > jbonofre@apache.org
> > http://blog.nanthrax.net
> > Talend - http://www.talend.com
--
Daniel Kulp
dkulp@apache.org
http://dankulp.com/blog
Talend - http://www.talend.com
Re: [DISCUSS] Rollback to Spring 3.0.5.RELEASE in Karaf 2.2.x
Posted by Andreas Pieber <an...@gmail.com>.
I've though we've settled with staying with Spring 3.0.6.RELEASE and
cxf/camel upgrade?
On Thu, Sep 8, 2011 at 11:07, Jean-Baptiste Onofré <jb...@nanthrax.net> wrote:
> Hi all,
>
> following our previous discussion around Camel and CXF, I would like:
>
> - to rollback to Spring 3.0.5.RELEASE on karaf-2.2.x branch
> - release Karaf 2.2.4 or maybe override the Karaf 2.2.3 with Spring
> 3.0.5.RELEASE
> - let the Spring 3.0.6.RELEASE upgrade to Karaf 3.0.x
>
> WDYT ?
>
> Regards
> JB
> --
> Jean-Baptiste Onofré
> jbonofre@apache.org
> http://blog.nanthrax.net
> Talend - http://www.talend.com
>