gmane.comp.java.geronimo.devel

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Ivan — 2013-05-18T01:11:39

+1 Thanks, Forrest !


2013/5/18 Jarek Gawor <jgawor-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

[jira] [Commented] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Jarek Gawor (JIRA — 2013-05-17T20:11:16

    [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13661000#comment-13661000 ] 

Jarek Gawor commented on GERONIMO-6451:
---------------------------------------

Committed your patch in revision 1483970. Thanks! Are you planning to validate this against TCK (signature tests)?

                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Updated] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Pinaki Poddar (JIRA — 2013-05-17T19:49:16

     [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pinaki Poddar updated GERONIMO-6451:
------------------------------------

    Attachment: jpa2.1-src.patch.txt

this patch includes source change for JPA 2.1.
the diff is generated against the following

https://svn.apache.org/repos/asf/geronimo/specs/trunk/geronimo-jpa_2.1_spec

Last Changed Author: gawor
Last Changed Rev: 1483469
Last Changed Date: 2013-05-16 10:50:55 -0700 (Thu, 16 May 2013)
                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Comment Edited] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Pinaki Poddar (JIRA — 2013-05-17T19:49:16

    [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13660989#comment-13660989 ] 

Pinaki Poddar edited comment on GERONIMO-6451 at 5/17/13 7:48 PM:
------------------------------------------------------------------

Kevan,

this patch includes source change for JPA 2.1, rather than a big dump.


the diff is generated against the following

https://svn.apache.org/repos/asf/geronimo/specs/trunk/geronimo-jpa_2.1_spec

Last Changed Author: gawor
Last Changed Rev: 1483469
Last Changed Date: 2013-05-16 10:50:55 -0700 (Thu, 16 May 2013)
                
      was (Author: ppoddar-1oDqGaOF3Lkdnm+yROfE0A< at >public.gmane.org):
    this patch includes source change for JPA 2.1.
the diff is generated against the following

https://svn.apache.org/repos/asf/geronimo/specs/trunk/geronimo-jpa_2.1_spec

Last Changed Author: gawor
Last Changed Rev: 1483469
Last Changed Date: 2013-05-16 10:50:55 -0700 (Thu, 16 May 2013)

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Jarek Gawor — 2013-05-17T18:39:18

+1. Thanks!

Jarek


On Fri, May 17, 2013 at 2:06 AM, Forrest Xia <forrestxm-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Alan Cabrera — 2013-05-17T18:05:53

+1


Regards,
Alan

On May 16, 2013, at 11:06 PM, Forrest Xia <forrestxm-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Kevan Miller — 2013-05-17T18:02:54

All looks good to me. Source, license/notice, rat, build…

Thanks Forrest!

--kevan
On May 17, 2013, at 2:06 AM, Forrest Xia <forrestxm-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

[VOTE] Release Geronimo 3.0.1

Forrest Xia — 2013-05-17T13:56:28

Hi Devs,

Please vote Geronimo 3.0.1 release with these major differences from the
previous release:
1. JSF 2.1 support
2. JDBC 4 support
3. Some components upgrade, including Tomcat, JPA, Yoko, Tranql, ActiveMQ
4. Quite a few bugs fixes

For details, see
http://svn.apache.org/repos/asf/geronimo/server/tags/geronimo-3.0.1/RELEASE_NOTES-3.0.1.txt

The server code up for vote is:
https://repository.apache.org/content/repositories/orgapachegeronimo-009/org/apache/geronimo/geronimo/3.0.1/geronimo-3.0.1-source-release.tar.gz
https://repository.apache.org/content/repositories/orgapachegeronimo-009/org/apache/geronimo/geronimo/3.0.1/geronimo-3.0.1-source-release.zip

The binary code up for vote is:
Java EE 6 Full Profile Tomcat Assemblies:
https://repository.apache.org/content/repositories/orgapachegeronimo-009/org/apache/geronimo/assemblies/geronimo-tomcat7-javaee6/3.0.1/geronimo-tomcat7-javaee6-3.0.1-bin.tar.gz
https://repository.apache.org/content/repositories/orgapachegeronimo-009/org/apache/geronimo/assemblies

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Shawn Jiang — 2013-05-17T13:39:15

+1， thanks !


On Fri, May 17, 2013 at 2:06 PM, Forrest Xia <forrestxm-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Mark Struberg — 2013-05-17T12:09:10

+1

LieGrue,
strub





>

Re: [VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Rex Wang — 2013-05-17T08:46:01

looks good to me, thanks forrest +1


2013/5/17 Forrest Xia <forrestxm-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org>

[VOTE] Release Geronimo Tomcat fork 7.0.39.2 for a security fix

Forrest Xia — 2013-05-17T06:06:54

Hi,

Please revote for the Geronimo Tomcat fork 7.0.39.2 release, which merges a
tomcat security fix for CVE-2013-2071

The components up for vote are:
https://repository.apache.org/content/repositories/orgapachegeronimo-008/org/apache/geronimo/ext/tomcat/tomcat-parent-7.0.39/7.0.39.2/tomcat-parent-7.0.39-7.0.39.2-source-release.zip


Staging repo is here:
https://repository.apache.org/content/repositories/orgapachegeronimo-008

tag is here:
http://svn.apache.org/repos/asf/geronimo/external/tags/tomcat-parent-7.0.39.2


 Vote open 72 hours

 [ ] +1 release this
 [ ] 0 don't care
 [ ] -1 don't release this (please explain)

[jira] [Resolved] (GERONIMO-6468) Pull the fix for tomcat security hole CVE-2013-2071 into 7.0.39 fork

Forrest Xia (JIRA — 2013-05-17T00:47:15

     [ https://issues.apache.org/jira/browse/GERONIMO-6468?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Forrest Xia resolved GERONIMO-6468.
-----------------------------------

    Resolution: Fixed
      Assignee: Jarek Gawor  (was: Forrest Xia)
    

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (GERONIMO-6468) Pull the fix for tomcat security hole CVE-2013-2071 into 7.0.39 fork

Forrest Xia (JIRA — 2013-05-17T00:45:16

    [ https://issues.apache.org/jira/browse/GERONIMO-6468?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13660212#comment-13660212 ] 

Forrest Xia commented on GERONIMO-6468:
---------------------------------------

Jarek has done this port back at r1483405, thanks!
                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Created] (GERONIMO-6468) Pull the fix for tomcat security hole CVE-2013-2071 into 7.0.39 fork

Forrest Xia (JIRA — 2013-05-17T00:27:16

Forrest Xia created GERONIMO-6468:
-------------------------------------

             Summary: Pull the fix for tomcat security hole CVE-2013-2071 into 7.0.39 fork
                 Key: GERONIMO-6468
                 URL: https://issues.apache.org/jira/browse/GERONIMO-6468
             Project: Geronimo
          Issue Type: Task
      Security Level: public (Regular issues)
          Components: Tomcat
    Affects Versions: 3.0.1
            Reporter: Forrest Xia
            Assignee: Forrest Xia
             Fix For: 3.0.1


Need to pull in a tomcat security fix into 7.0.39 fork for G 3.0.1 release

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Jarek Gawor (JIRA — 2013-05-16T17:53:16

    [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13659765#comment-13659765 ] 

Jarek Gawor commented on GERONIMO-6451:
---------------------------------------

Committed some JPA 2.1 updates in revision 1483469.

                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Kevan Miller (JIRA — 2013-05-16T15:49:16

    [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13659652#comment-13659652 ] 

Kevan Miller commented on GERONIMO-6451:
----------------------------------------

Hi Pinaki,
I assume that you've created the source in geronimo-jpa_2.1_spec-1.0-src.jar? 

Is there a reason why this source is not built from our 2.0 source (i.e. https://svn.apache.org/repos/asf/geronimo/specs/trunk/geronimo-jpa_2.0_spec). 

BTW, we'd be happy to svn copy geronimo-jpa_2.0_spec to geronimo-jpa_2.1_spec...
                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Commented] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Jarek Gawor (JIRA — 2013-05-16T15:47:18

    [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13659650#comment-13659650 ] 

Jarek Gawor commented on GERONIMO-6451:
---------------------------------------

In revision 1483415 I setup a new geronimo-jpa_2.1_spec project (copied from 2.0) - see https://svn.apache.org/repos/asf/geronimo/specs/trunk/geronimo-jpa_2.1_spec/ (svn location). Can you please submit your 2.1 updates as a patch against this code?

                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Re: Time for a new Geronimo 3 release?

Kevan Miller — 2013-05-16T15:38:35

On May 16, 2013, at 10:22 AM, Jarek Gawor <jgawor-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org> wrote:


I'm fine with either approach. If a patched 7.0.39 is simpler, then do that…

--kevan

[jira] [Updated] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Pinaki Poddar (JIRA — 2013-05-16T15:25:18

     [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pinaki Poddar updated GERONIMO-6451:
------------------------------------

    Attachment: geronimo-jpa_2.1_spec-1.0-src.jar
                geronimo-jpa_2.1_spec-1.0.jar

Compiled library and source files for JSR-338 (JPA) Specification version 2.1.
                

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

[jira] [Issue Comment Deleted] (GERONIMO-6451) API jar for JSR 338 - JPA 2.1

Pinaki Poddar (JIRA — 2013-05-16T15:25:15

     [ https://issues.apache.org/jira/browse/GERONIMO-6451?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Pinaki Poddar updated GERONIMO-6451:
------------------------------------

    Comment: was deleted

(was: Source files for JSR-338 JPA 2.1 Specification. )
    

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira