Update cxf because of vulnerabilities

roskart / dropwizard-jaxws

Dropwizard bundle that enables building SOAP web services and clients using JAX-WS API

Apache License 2.0

43 stars 36 forks source link

Update cxf because of vulnerabilities #30

Closed chris-- closed 3 years ago

chris-- commented 3 years ago

Hi,

thanks a lot for the lib, which works perfectly fine for a legacy soap endpoint of mine! There is a new cxf version out (3.4.4), that again fixes vulnerabilities. My (limited) testing with cxf 3.4.4 and Dropwizard 2.0.23 shows no problems. Do you see any issues upgrading cxf in the library?

Cheers, Christian

roskart commented 3 years ago

Hello. I am glad that you find the lib useful. I ran some tests and I see no issues. New release should be available soon.

chris-- commented 3 years ago

Thanks @roskart, that was lightning fast :) ! Updated to the new version and it's running just fine.