Warning in catalina.out "XStream is probably vulnerable"

Ingo Zahn

unread,

Jul 30, 2018, 11:26:18 AM7/30/18

to OpenOLAT

Hello,

after a working OpenOLAT setup i looked at catalina.out logfile. There are many warnings which i could resolve about caching and two warnings of properties in ROOT.XML. But there are some warnings about XStream where i don't now the significance.

The Warning says: Security framework of XStream not initialized, XStream is probably vulnerable.

Is this a security-problem for my OpenOLAT instance. Can i do something or can i ignore the message.

Thanks in advance

Ingo Zahn

Florian Gnägi

unread,

Jul 30, 2018, 11:38:24 AM7/30/18

to open...@googlegroups.com

You can safely ignore the message, there is no risk. At some point XStream added a check that makes sense in some cases, however in OpenOLAT is it not an issue. We did not have the time to refactor everything to make the message disappear. You could set the logger there to error.

Cheers

Florian

--
--
Sie erhalten diese Nachricht, weil Sie Mitglied sind von Google
Groups-Gruppe "OpenOLAT".
Für das Erstellen von Beiträgen in dieser Gruppe senden Sie eine E-Mail
an open...@googlegroups.com
Um sich von dieser Gruppe abzumelden, senden Sie eine E-Mail an
openolat+u...@googlegroups.com
Weitere Optionen finden Sie in dieser Gruppe unter
http://groups.google.com/group/openolat?hl=de
-------------------------------------------------------------------------------------------------------------------
OpenOLAT - infinite learning - http://www.openolat.org

---
You received this message because you are subscribed to the Google Groups "OpenOLAT" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openolat+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.