February 2010 Report

Xerces-J

Xerces-C++

Xerces-C++ 3.1.0 was released on the 1st of February. This includes a fix for CVE-2009-1885 (the security issue reported by CERT-FI last summer). A bug-fix 3.1.1 release may follow in a few months if needed.

Xerces-P

Jason Stewart announced to the PMC in January that he would be leaving the project after a long absence, so at the moment Xerces-P has no active maintainers. Xerces-P was folded into the Xerces-C++ codebase in 2007 so any of the C++ developers could pick this up in the future if they were motivated to. A user recently asked how they could use Xerces-P with Xerces-C++ 3.1.0 (this isn't possible with the current Perl version) so there may still be some interest in the community in further development.

XML Commons

In December, we released xml-commons-external-1.4.01 (JAXP 1.4), xml-commons-external-1.3.05 (JAXP 1.3) and xml-commons-external-1.2.06 (JAXP 1.2). These were the first releases from XML Commons since 2006. The JAXP 1.4 APIs will be bundled with Xerces-J 2.10.0. Some new bug reports have been coming in for the XML Commons Resolver which should be investigated.

General

Boris Kolpackov was formally added to the PMC in December. The vote occurred in 2008 but seems we forgot to send the result to the board for acknowledgment at the time.