[JUDDI-991] JUDDI Uses EOL Version of Apache CXF

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.3.5
• Fix Version/s: 3.3.7
• Component/s: CXF
• Labels: security
• Assignee: Alex O'Ree
• Reporter: Mark Kloepping
• Created: 22/Aug/18 19:54
• Updated: 11/Jan/20 23:13
• Resolved: 13/Dec/19 21:28

Description

JUDDI uses Apache CXF version 2.7.18 which is an End of Life (EOL) version of the library.  

"Versions of CXF prior to 3.1.x are no longer supported at Apache. They are now considered end-of-life and are therefore unsupported. Users are highly encouraged to migrate to newer versions of CXF." ref: http://cxf.apache.org/roadmap.html

Hopefully a future release to JUDDI can include a more recent and supported version of Apache CXF.