Currently, the managed version of Hibernate is 3.6.9. This version is
rather ancient, from 2011. It is used by one extension:
geofence-server; and one community module: monitor-hibernate.
Taskmanager, a community module that I maintain, uses a more recent
version of hibernate: 5.3.20. This does not pose any issues in building
and deploying as long as you do not combine it with either one of the
two other modules. However, the plugin ZIP file is broken and this
cannot be fixed because the ‘release’ module must choose one version for
everything. (This was reported by a user on jira: https://osgeo-org.atlassian.net/browse/GEOS-10690)
Are there any plans to upgrade the hibernate version of the other
modules? I don’t think it even involves even any considerable coding
work, although it may generate a lot of ‘deprecated’ warnings.
I noticed there has been talk about removing ‘monitor-hibernate’
altogether. Since the community dir has its own release module, I
suppose it would be technically possible to change the version only
there, but perhaps rather confusing.
I guess the limitation here is the time to upgrade, check what need to change on codebase and test after the upgrade. I can start to experiment upgrading geofence in the next days.
Regarding version I see 5.3.20 has already CVE record linked, maybe we can target upgrade to latest 5.3.x series like 5.6.15.Final?
Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.
This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.
Yes, it’s a web of dependencies, I don’t know all the details (Emanuele please help here)
but updating Hibernate leads to other issues, as GeoFence uses Hibernate spatial
and generic-dao, the latter is dead, hibernate spatial was folded into Hibernate but lost the ability to
read/write on H2 v1.x spatialized databases, which is the default storage for rules… meaning
an upgrade path also needs to be provided there. Long story short, it’s long and complicated.
See also the rejected GSIP 216, which took a month worth of work to implement. Now that’s a wholesale rewrite
with many more changes, but it should give you some perspective on the
effort should one stop at the “simple” library upgrade.
Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.
This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail
some time ago I tried removing the GenericDao, upgrading the hibernate+spatial version (see https://github.com/geoserver/geofence/issues/255).
It was a successful proof of concept, but it was applied on an old code base.
I can try cherry picking the changes on the current main branch.
I’ll let you know how it goes.
Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.
This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail
Con riferimento alla normativa sul trattamento dei dati personali (Reg. UE 2016/679 - Regolamento generale sulla protezione dei dati “GDPR”), si precisa che ogni circostanza inerente alla presente email (il suo contenuto, gli eventuali allegati, etc.) è un dato la cui conoscenza è riservata al/i solo/i destinatario/i indicati dallo scrivente. Se il messaggio Le è giunto per errore, è tenuta/o a cancellarlo, ogni altra operazione è illecita. Le sarei comunque grato se potesse darmene notizia.
This email is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential or otherwise protected from disclosure. We remind that - as provided by European Regulation 2016/679 “GDPR” - copying, dissemination or use of this e-mail or the information herein by anyone other than the intended recipient is prohibited. If you have received this email by mistake, please notify us immediately by telephone or e-mail.