Apache Geronimo Board Report

The Geronimo project generated multiple releases over the last three months. The community is discussing a Geronimo Server 2.2 release. There have also been discussions regarding OSGi and potential support from within Geronimo. Ivan Xu joined the Geronimo project as our newest committer.

Releases

Server

Geronimo Server 2.1.4 was released. This release included multiple bug fixes and addressed 3 security vulnerabilities in the admin console.

Plugins

Components

• Geronimo TxManager 2.1.2 was released. This release included multiple bug fixes.

DayTrader

DevTools

• Geronimo Eclipse Plugin 2.1.4 was released. This release included bug fixes and support for the latest 2.1.4 server release.

Genesis

GShell

• GShell 1.0-alpha2 was released

XBean

• XBean 3.5 was released.

Samples

Javamail

• Javamail Spec 1.6 and Provider 1.7 were released.

Specs

JUGs and Conferences

Two Geronimo presentations were made at ApacheCon EU 2009 by David Jencks:

• Administering Apache Geronimo 2.x
• Administering Apache Geronimo through Custom Server Assemblies

Policy Changes

The community established a policy for dealing with Security Vulnerabilities. The Server 2.1.4 release was the first release to follow this policy.

The community discussed using the Apache Nexus installation for release and snapshot staging/deployment. The community decided to hold off on switching to this new process until after the Geronimo Server 2.1.4 release.

Community

Security

Three security vulnerabilities were discovered in the Geronimo admin console. There were fixed in the Geronimo Server 2.1.4 release:

• CVE-2008-5518
• CVE-2009-0038
• CVE-2009-0039

New PMC Members

New Committers

• Ivan Xu

Other Issues and News

We requested the jsr-196 (jaspi) tck from sun on dec 2 2008 and still haven't received it.