The Geronimo project generated multiple releases over the last three months. The community is discussing a Geronimo Server 2.2 release. There have also been discussions regarding OSGi and potential support from within Geronimo. Ivan Xu joined the Geronimo project as our newest committer.
Geronimo Server 2.1.4 was released. This release included multiple bug fixes and addressed 3 security vulnerabilities in the admin console.
Two Geronimo presentations were made at ApacheCon EU 2009 by David Jencks:
The community established a policy for dealing with Security Vulnerabilities. The Server 2.1.4 release was the first release to follow this policy.
The community discussed using the Apache Nexus installation for release and snapshot staging/deployment. The community decided to hold off on switching to this new process until after the Geronimo Server 2.1.4 release.
Three security vulnerabilities were discovered in the Geronimo admin console. There were fixed in the Geronimo Server 2.1.4 release:
We requested the jsr-196 (jaspi) tck from sun on dec 2 2008 and still haven't received it.