Page History

...

Apache CXF™ is an open source services framework. CXF helps you build and develop services using frontend programming APIs, like JAX-WS and JAX-RS. These services can speak a variety of protocols such as SOAP, XML/HTTP, RESTful HTTP, or CORBA and work over a variety of transports such as HTTP, JMS or JBI.

News

...

June 30, 2020 - Apache CXF 3.3.

...

7 and 3.2.

...

14 released!

The Apache CXF team is proud to announce the availability of our latest patch releases!  Over 30 25 JIRA issues were fixed for 3.3.67, many back ported to 3.2.1314.

These releases contain a fix for a new security advisory:

...

Note: This is the last planned release for the 3.2.x series of CXF.   Users are encouraged to migrate  to 3.3.x.

Downloads are available here.

...

March 30, 2020 - Apache CXF 3.3.

...

6 and 3.2.

...

13 released!

The Apache CXF team is proud to announce the availability of our latest patch releases!  Over 30 JIRA issues were fixed for 3.3.56, many back ported to 3.2.1213.

These releases contain fixes a fix for two a new security advisoriesadvisory:

• CVE-20192020-175731954: Apache CXF Reflected XSS in the services listing pageCVE-2019-12423: Apache CXF OpenId Connect JWK Keys service returns private/secret credentials if configured with a jwk keystoreJMX Integration is vulnerable to a MITM attack

Downloads are available here.

...