Release 1.4-ayg-04

Fix for CVE-2023-40743

Release 1.4-ayg-03

Fix for CVE-2019-0227

Version 1.4-ayg-02

• Fixes CVE-2018-8032

Version 1.4-ayg-01

Security fixes

• Fixes CVE-2012-5784
• Fixes CVE-2014-3596

Previous fixes in SVN but not in 1.4

API Changes

• Rename ProjectResourceBundle.clearCache() to clearPRBCache()
• AXIS-2850: Removed the inherently non thread-safe Service#getCall() method and solved a thread safety issue involving Service#createCall(). The removed method is part of the public API, but:
  • It is deprecated since Axis 1.2.
  • People generally prefer build failures or NoSuchMethodErrors over dealing with subtle concurrency issues that only show up in production systems and that are not reproducible.

Miscellaneous

• Removed the org.apache.axis.components.image stuff and just use the Java 1.4 ImageIO API.
• Build system switched from ant to maven

Bug Fixes

• AXIS-2909 ConcurrentModificationException when running under Java 1.8.0_20 or later
• AXIS-2442 java file generated using WSDL2JAVA fail to compile with 'too many parameters' error
• AXIS-2910 DimeBodyPart.send does not close stream for dynamic content
• AXIS-1581 NullPointerException - null reqMsg in Call.java
• AXIS-1315 java2wsdl task ignores its tag
• AXIS-2877 wsdl2java ant task fails to load custom GeneratorFactory from
• AXIS-2850 org.apache.axis.client.Service method createCall() may return same Call to simultaneous calls.
• AXIS-2064 The format of multi-cookie in HTTP request head
• AXIS-2327 ClassCastException in UnsignedInt and UnsignedLong
• AXIS-2455 LogHandler writeToConsole broken
• AXIS-2415 The SecurityProvider is not put in the MessageContext for GET requests
• AXIS-2394 SOAPFaultBuilder throws DOMException WRONG_DOCUMENT_ERR
• AXIS-2705 SOAPFaultBuilder throws DOMException WRONG_DOCUMENT_ERR