Arquillian cube test may fail with newer versions of undertow.

jelmew commented 4 years ago

Issue Overview

Withouth specifically specifying Undertow on the classpath, test fail with the error:

java.lang.NoClassDefFoundError: io/undertow/protocols/spdy/SpdyChannel Caused by: java.lang.ClassNotFoundException: io.undertow.protocols.spdy.SpdyChannel

Expected Behaviour

Expecting test to succesfully complete (by either placing the correct undertow on the classpath for arquillian or by being compatible with newer versions).

Current Behaviour

A newer version of Undertow may be on the classpath. For example (undertow-core-2.0.23.Final). This version does not contain SpdyChannel, causing the test to fail.

Steps To Reproduce

[step 1] Place a newer version of undertow-core onthe compile path
[step 2] Run a test. (For example, HelloPodOPenShiftItCase from org.arquillian.cube.openshift.ftest).

voronovmaksim commented 2 years ago

Hi. Any news? i have same exception

Sachpat commented 2 years ago

Hi Any update on compatibility with the newer versions of undertow? . Undertow 1.x come with many Vulnerabilities listed below:

CVE-2020-10719 = io.undertow:undertow-core:1.3.33.Final
CVE-2018-1067 = io.undertow:undertow-core:1.3.33.Final
CVE-2021-20220 = io.undertow:undertow-core:1.3.33.Final
CVE-2019-10212 = io.undertow:undertow-core:1.3.33.Final
CVE-2016-6311 = io.undertow:undertow-core:1.3.33.Final
CVE-2020-10687 = io.undertow:undertow-core:1.3.33.Final
CVE-2019-14888 = io.undertow:undertow-core:1.3.33.Final
CVE-2020-27782 = io.undertow:undertow-core:1.3.33.Final
CVE-2020-10705 = io.undertow:undertow-core:1.3.33.Final
CVE-2020-1745 = io.undertow:undertow-core:1.3.33.Final
CVE-2020-1757 = io.undertow:undertow-core:1.3.33.Final
CVE-2019-3888 = io.undertow:undertow-core:1.3.33.Final
CVE-2021-3597 = io.undertow:undertow-core:1.3.33.Final
CVE-2018-14642 = io.undertow:undertow-core:1.3.33.Final
CVE-2021-3859 = io.undertow:undertow-core:1.3.33.Final
CVE-2018-1114 = io.undertow:undertow-core:1.3.33.Final
CVE-2018-1048 = io.undertow:undertow-core:1.3.33.Final

These all vulnerabilities can only get resolved by updated to the 2.x version of undertow. Please make Arquillian cube compatible with the same (undertow 2.x) and maybe update to the same already in the poms.

bartoszmajsak commented 1 year ago

Hi @Sachpat. Have you tried to overwrite dependency with Undertow 2.x? Does it result in an error?

arquillian / arquillian-cube