Geronimo 2.1.3 Release Plan/Status
Release Manager: Donald Woods, Joe Bohn
SVN Branch: htps://svn.apache.org/repos/asf/geronimo/server/branches/2.1/
Proposed Branch/freeze date: August 29, 2008
Proposed Release Candidate: September 5, 2008
Proposed Release date: September 15, 2008
Planned Items:
Required Items:
Reference |
Person |
Description |
Status |
---|---|---|---|
Donald Woods |
Include patched build of AMQ 4.1.2 to resolve AMQ-1272 security exposure |
|
|
Donald Woods |
Upgrade to Tomcat 6.0.18 to pickup security fixes |
|
|
Donald Woods |
Upgrade to DWR 2.0.5 for XSS security fix |
|
|
Genesis 1.3.1 |
Donald |
Release Genesis 1.3.1 |
up for vote |
Javamail spec 1.5 & provider 1.6 |
Joe |
Release Javamail spec 1.5 & Provider 1.6 |
|
Samples |
Joe |
Ensure 2.1.2 Samples can run on 2.1.3 (via alias entries) |
|
Update release notes |
Donald Woods |
Add in resolved issues and known issues into release notes - other updates as necessary |
|
update README.txt |
Donald Woods |
|
|
legal muck |
Donald/Joe/Kevan |
validate license headers, NOTICE and LICENSE files |
|
Optional Items:
Reference |
Person |
Description |
Status |
---|---|---|---|
Donald |
Upgrade to geronimo-javamail_1.4_mail-1.6 |
|
|
Joe Bohn |
Allow plugins with dependencies on older geronimo 2.1.* components to install on Geronimo 2.1.3 |
|
|
|
|
|
|
Included JIRAs:
As of 20080827 @ 10:37 PST
Security Fixes
JIRA |
Description |
---|---|
Upgrade to DWR 2.0.5 for XSS security fix |
|
Include patched build of AMQ 4.1.2 to resolve AMQ-1272 security exposure |
|
Upgrade to Tomcat 6.0.18 to pickup security fixes |
Server Bug Fixes
JIRA |
Description |
---|---|
Upgrade to DWR 2.0.5 for XSS security fix |
|
Include patched build of AMQ 4.1.2 to resolve AMQ-1272 security exposure |
|
Server logging similar exceptions for AxisFaults and for unexpected errors |
|
Upgrade to Tomcat 6.0.18 to pickup security fixes |
|
Build exception: java.net.MalformedURLException: no !/ in spec |
|
Incorrect message is show even if the deployment failed in the web console |
|
Outofmemory exception throwed by WebAccessLogViewer if the access log file size is too large, such as more than 200M |
|
NullPointerException in ConnectorModuleBuilder |
|
"Not Known To This Context" JAXBException when attempting to return complex data type from a @WebMethod |
|
From console: database pool doesn't work well if the name contains a / like jdbc/EmployeeDataSource |
Server Improvements
JIRA |
Description |
---|---|
install plugin from deploy tool doesn't honor load="false" |
|
JNDI search should be case-insensitive by default |
|
Upgrade derby to 10.4.1.3 |
|
Geronimo Tomcat Clustering - No GBeans for adding Static Members |
JavaMail Fixes/Improvements
JIRA |
Description |
---|