# Apache Axis2 1.5.2 Release Notes

## About this version

1.5.2 is a maintenance release to fix the security issue described in CVE-2010-1632 as well as an XSS vulnerability in the admin console and some other minor issues. It also upgrades Axiom to version 1.2.9.

## Changes since 1.5.1

- [AXIS2-3290] surefire is still run even if maven.test.skip is true
- [AXIS2-4113] Unable to sign axis2 jar 1.4/1.4.1: ZipException
- [AXIS2-4371] Unable to compile class for JSP: axis2-web/viewphases.jsp
- [AXIS2-4450] CVE-2010-1632: Message builders for SOAP and XML should not attempt to load DTDs
- [AXIS2-4751] Cookie value is always kept whatever SESSION_MAINTAIN_PROPERTY value is configured
- [AXIS2-4752] Timeout due to connection pool is starved in latest 1.5.2-SNAPSHOT code.
- [AXIS2-4768] Mtom optimization doesn't work when using simple bean
- [AXIS2-4787] Hardcoded Bundle-Versions in adb, jaxws, kernel, metadata and saaj modules
- [AXIS2-4788] axis2-jibx has conflicting bcel dependencies

## About Axis2

Apache Axis2 is a complete re-design and re-write of the widely used Apache Axis engine and is a more efficient, more scalable, more modular and more XML-oriented Web services framework. It is carefully designed to support the easy addition of plug-in "modules" that extend its functionality for features such as security and reliability.

Modules supporting WS-Security/Secure-Conversation (Apache Rampart), WS-Trust (Apache Rahas), WS-Reliable Messaging (Apache Sandesha) and WS-Eventing (Apache Savan) are available via the Apache Web Services project. Please see the individual subproject sites for further information.

## Feedback

We are striving for a simple and happy first time user experience as well as a satisfying experienced user experience with this release. We welcome any and all feedback at:

- java-user@axis.apache.org (please include "[axis2]" in the subject)
- java-dev@axis.apache.org (please include "[axis2]" in the subject)
- http://issues.apache.org/jira/browse/AXIS2

Thank you for your interest in Apache Axis2!

The Axis2 Development Team
http://axis.apache.org/