Due to dependency of xmlsec-2.1.7 in the openam-federationCaused by: java.lang.AbstractMethodError #730
Comments
vharseko
added a commit
to vharseko/OpenAM
that referenced
this issue
Mar 25, 2024
Direct vulnerabilities: CVE-2023-44483 Vulnerabilities from dependencies: CVE-2023-36479 CVE-2023-33202 CVE-2023-33201 CVE-2023-26049 CVE-2023-26048 CVE-2022-40156 CVE-2022-40155 CVE-2022-40154 CVE-2022-40153 CVE-2022-40152 CVE-2022-34169 CVE-2022-23437 CVE-2021-34428 CVE-2021-28169 CVE-2021-28165 CVE-2020-27223 CVE-2020-27218 CVE-2020-14338
vharseko
added a commit
that referenced
this issue
Mar 27, 2024
* [#730] Bump xml-sec 2.1.7 -> 2.2.6 Direct vulnerabilities: CVE-2023-44483 Vulnerabilities from dependencies: CVE-2023-36479 CVE-2023-33202 CVE-2023-33201 CVE-2023-26049 CVE-2023-26048 CVE-2022-40156 CVE-2022-40155 CVE-2022-40154 CVE-2022-40153 CVE-2022-40152 CVE-2022-34169 CVE-2022-23437 CVE-2021-34428 CVE-2021-28169 CVE-2021-28165 CVE-2020-27223 CVE-2020-27218 CVE-2020-14338 * <artifactId>xmlsec</artifactId><version>3.0.4</version> * error: package javax.xml.bind.annotation does not exist
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
In the openam-federation-library, the xmlsec code is not updated from the old version to the latest one cause of the changes made by this jira ticket https://issues.apache.org/jira/browse/SANTUARIO-377, getting abstractmethod error. when the xmlsignature.sign method is called at at com.sun.identity.saml2.xmlsig.FMSigProvider.sign(FMSigProvider.java:220)
The text was updated successfully, but these errors were encountered: