Note sun unresponsiveness to jaspi tck request.

Apache Geronimo Board Report - 2009-01 - January

Apache Geronimo Board Reports

Apache Geronimo Board Report

The Geronimo project generated multiple releases over the last three months. The community is discussing a Geronimo Server 2.2 release. There are also discussions regarding OSGi and potential support from within Geronimo. Ivan Xu joined the Geronimo project as our newest committer.

Releases

Server

Geronimo Server 2.1.4 was released. This release included multiple bug fixes and addressed 3 security vulnerabilities in the admin console.

Plugins

Components

• Geronimo TxManager 2.1.2 was released. This release included multiple bug fixes.

DayTrader

DevTools

• Geronimo Eclipse Plugin 2.1.4 was released. This release included bug fixes and support for the latest 2.1.4 server release.

Genesis

GShell

• GShell 1.0-alpha2 was released

XBean

• XBean 3.5 was released.

Samples

Javamail

• Javamail Spec 1.6 and Provider 1.7 were released to address problems which were uncovered.

Specs

• We requested the jsr-196 (jaspi) tck from sun on dec 2 2008 and still haven't received it.

JUGs and Conferences

Two Geronimo presentations were made at ApacheCon EU 2009 by David Jencks:

• Administering Apache Geronimo 2.x
• Administering Apache Geronimo through Custom Server Assemblies

Policy Changes

Privacy Policy was created and linked in to all Confluence generated websites, due to us using Google Analytics -
http://cwiki.apache.org/GMOxPMGT/geronimo-privacy-policy.html

Community

Automated Java EE 5 TCK tests are running on phoebe and selene – providing much faster test results that can be shared and reproduced by the entire TCK community. In addition some manually driven TCK testing has been performed for non-Geronimo projects.

Security

Three security vulnerabilities were discovered in the Geronimo admin console. There were fixed in the Geronimo Server 2.1.4 release:

• CVE-2008-5518
• CVE-2009-0038
• CVE-2009-0039

New PMC Members

New Committers

• Ivan Xu

Other Issues and News

The community discussed using the Apache Nexus installation for release and snapshot staging/deployment. The community decided to hold off on switching to this new process until after the Geronimo Server 2.1.4 release.