The Apache Software Foundation

안녕하세요 www.apache.or.kr 운영자 김진배입니다.

작년 말에 아파치 재단에서 인큐베이터 프로젝트인 hama를 진행하시는 윤진석 (Edward J. Yoon)님이 부탁하신 도메인 연결을 다시 복구하였습니다.

apache.or.kr에 추가된 도메인은 아래와 같습니다.

irgroup.apache.or.kr : 220.73.159.180
hadoop.apache.or.kr : 220.73.159.180
hama.apache.or.kr : http://incubator.apache.org/hama 로의 포워딩
입니다.

관심있으신 분들의 많은 이용을 바랍니다.

- 운영자 -

안녕하세요.

www.apache.or.kr의 운영자 김진배입니다.
2000년 2월 28일 처음으로 도메인을 등록한 후 이제 10년이 다되어갑니다.

2002년에 시작한 미러링도 꾸준히 서비스 해오다 작년 말에 결국 전에 있던 회사 서버관리자가 잘못 관리하는 바람에 미러 데이터를 모두 날려버렸습니다.

그 후 회사 서버관리자가 그만 둔 후 서비스가 중단된 채로 방치해오다 2008년 12월에 다시 서비스를 오픈하게 되었습니다.

우선 TnSLinux에서 기꺼이 서비스를 지원하겠다고 하셔서, 그쪽 도움으로  미러링 서버와 전용회선을 확보한 뒤 데이터를 www.apache.org로부터 새로 받아온 후 미러링 서비스를 시작했습니다.

그 후 www.apache.org 미러링 담당자를 통해 다시 미러링 사이트 목록에 이름을 올렸습니다.

그리고, www.apache.or.kr 서비스를 새로 구축했는데, 처음엔 GNU board를 이용해서 만들었는데, 관리의 문제와 제가 생각하는 목적에 맞지 않기 때문에 tistory를 택했습니다.

tistory가 2차 도메인 서비스가 되고, 서비스의 목적이 일반 Q&A의 경우는 많은 사이트들이 이미 구축되어 있기 때문에 또 다시 게시판 서비스를 해봐야 별 효과도 없을 것이라 생각했습니다.

저는  이 사이트의 목적을 apache foundation의 소식을 전달하는 창구로 삼고, 이를 표현할 수 있는 방법이 블로그라면 충분하다고 판단했기 때문입니다.

아파치관련 문의는 정관진님이 운영하시는 아파치 사용자 커뮤니티(http://www.apache-kr.org) 에 하시길 바라고,

아파치 관련 문서는 권순선님이 운영하시는 제 마음의 고향인 KLDP(http://www.kldp.org)에서 확인하시길 바랍니다.

앞으로 메일링을 통해서 apache foundation으로부터 전해오는 소식을 여러분들에게 알려드리도록 하겠습니다.

그럼, 많은 이용바랍니다.

- 운영자 올림-

안녕하세요,
아파치 Continuum팀에서 Apache Continuum 1.3.1 (Alpha)을 출시하였습니다.


Release Notes - Continuum - Version 1.3.1

** 하위 작업
    * [CONTINUUM-2023] - Document usage of parallel builds

** 버그
    * [CONTINUUM-1513] - Release does not work when maven 2 executable is not on PATH
    * [CONTINUUM-1978] - regression from 1.1 to 1.2.2: Add Maven 2.0+ Project using https POM Url where the source server has self signed certificate
    * [CONTINUUM-1981] - Error while using Windows domain in username when adding a M2 project
    * [CONTINUUM-1984] - Dead link to data-management-cli-1.2-app.jar in upgrade documentation
    * [CONTINUUM-1988] - Cannot build project if triggered from Project Information page
    * [CONTINUUM-1998] - Unable to delete a user
    * [CONTINUUM-1999] - Missing validation error message for duplicate project group
    * [CONTINUUM-2008] - Creating or Editing  "build definition" and "build definition template" generates javascript error
    * [CONTINUUM-2017] - Unable to add build definitions to a template
    * [CONTINUUM-2021] - NullPointerException when sending mail notification
    * [CONTINUUM-2030] - Show Users in Role paging not working
    * [CONTINUUM-2035] - Unable to release when Distributed Build is enabled
    * [CONTINUUM-2040] - NPE encountered when building a project migrated from an old database

** 개선
    * [CONTINUUM-1829] - separate transient errors from build failures in notification and display
    * [CONTINUUM-1864] - Transient State
    * [CONTINUUM-1884] - Clicking 'Done' after a successful release perform sends you all the way out to the list of groups
    * [CONTINUUM-1962] - Migrate to Struts 2
    * [CONTINUUM-1969] - Externalize all strings and make continuum fully localizable.
    * [CONTINUUM-2010] - Add group cancel build
    * [CONTINUUM-2013] - Database migration tool for migration from 1.2.x to 1.3.x

** 새로운 특징
    * [CONTINUUM-265] - Concurrent builds
    * [CONTINUUM-1666] - Distributed Builds

** 작업
    * [CONTINUUM-1990] - Unable to publish website from 1.3.0 tag
    * [CONTINUUM-2024] - Upgrade httpclient to 4.0beta2

** 요청
    * [CONTINUUM-1635] - Manage configurable number of parallel build queues

다운로드 링크 : http://continuum.apache.org/download.html

이 릴리즈에 도움을주신 많은 분들께 감사드립니다.

The Apache Continuum Team

아파치 Jackrabbit 커뮤니티에서 Apache Jackrabbit 1.5.2을 릴리즈(release)하였습니다.
이 릴리즈는 아래에서 다운로드 할 수 있습니다.

   http://jackrabbit.apache.org/downloads.html

이 릴리즈에 대한 상세한 내역은 아래 Release Notes를 읽어 보시기 바랍니다.

Release Notes -- Apache Jackrabbit -- Version 1.5.2

소개
------------

Apache Jackrabbit is a fully conforming implementation of the Content
Repository for Java Technology API (JCR). A content repository is a
hierarchical content store with support for structured and unstructured
content, full text search, versioning, transactions, observation, and
more. See the Jackrabbit web site at http://jackrabbit.apache.org/ for
more information.

Apache Jackrabbit 1.5.2 is a security and bug fix release that fixes
issues reported against previous releases. This release is fully
compatible with the earlier 1.5.0 release.

Most notably, this release fixes the following security vulnerability.
Thanks to the Red Hat Security Response Team for reporting this issue.

 * CVE-2009-0026: Cross site scripting issues in webapp (JCR-1925)

   The search.jsp and swr.jsp pages in the Jackrabbit webapp are
   vulnerable to script injection. This release fixes the issue
   by properly escaping all user input.

   This issue affects both the Jackrabbit 1.4 and 1.5.0 releases.
   If you are unable to upgrade to 1.5.2 at this point, you can
   work around this issue by disabling the search.jsp and swr.jsp
   pages in the Jackrabbit webapp.

See below for a full listing of fixes included in this release.

이번 릴리즈에서 바뀐 것
-----------------------

All the fixes in this release are listed below per affected component.
The modified components have had their version numbers upgraded to 1.5.2;
other components are still at version 1.5.0. Jackrabbit version 1.5.1
was cancelled due to incorrect license headers in the source code.

jackrabbit

 버그 수정
 [JCR-1936] Incorrect license headers in multiple components

jackrabbit-core

 버그 수정
 [JCR-1823] Repository.login throws IllegalStateException
 [JCR-1838] Garbage collection deletes temporary files in FileDataStore
 [JCR-1846] Jackrabbit thread contention issue due to fat lock
 [JCR-1920] Custom LoginModule configurations broken in 1.5.0
 [JCR-1931] SharedFieldCache$StringIndex memory leak causing OOM's

jackrabbit-jcr-commons

 버그 수정
 [JCR-1926] Text.unescape("%") throws a StringIndexOutOfBoundsException

jackrabbit-jcr-server

 버그 수정
 [JCR-1902] Warning while building DAV:parent-set for root-node resource

jackrabbit-jcr-servlet

 버그 수정
 [JCR-1910] RMIRemoteBindingServlet fails to initialize if the RMI ...

jackrabbit-standalone

 버그 수정
 [JCR-1912] RMI reference not automatically bound by the standalone server

jackrabbit-webapp

 보안 수정
 [JCR-1925] CVE-2009-0026: Cross site scripting issues in webapp

 버그 수정
 [JCR-1920] The 1.5.0 webapp points to 1.4 javadocs
 [JCR-1930] Extra </div> in populate.jsp

jackrabbit-webdav

 버그 수정
 [JCR-1926] Text.unescape("%") throws a StringIndexOutOfBoundsException

Jackrabbit에 관련한 자세한 개별 게시물(individual issues)는 https://issues.apache.org/jira/browse/JCR  이슈 트래커에서 찾을 수 있습니다.

릴리즈 내용
----------------

This release consists of a single source archive (jackrabbit-1.5.2-src.jar)
that contains all the Apache Jackrabbit components. Use the following
commands (or the equivalent in your system) to build the release with
Maven 2 and Java 1.4 or higher:

   jar xf jackrabbit-1.5.2-src.jar
   cd jackrabbit-1.5.2-src
   mvn install

Note that the OCM components require Java 5 or higher, and are not included
in the build when using Java 1.4.

The source archive is accompanied by SHA1 and MD5 checksums and a PGP
signature that you can use to verify the authenticity of your download.
The public key used for the PGP signature can be found at
https://svn.apache.org/repos/asf/jackrabbit/dist/KEYS.

The build will result in the following components (with artifactIds in
parenthesis) being built and installed in your local Maven repository.
Pre-built binary artifacts of these components are also available on
the on the central Maven repository.

 * Jackrabbit Parent POM (jackrabbit-parent)
   The Maven parent POM for all Jackrabbit components.

 * Jackrabbit API (jackrabbit-api)
   Interface extensions that Apache Jackrabbit supports in
   addition to the standard JCR API.

 * Jackrabbit JCR Commons (jackrabbit-jcr-commons)
   General-purpose classes for use with the JCR API.

 * Jackrabbit JCR Tests (jackrabbit-jcr-tests)
   Set of JCR API test cases designed for testing the compliance
   of an implementation. Note that this is not the official JCR TCK!

 * Jackrabbit JCR Benchmarks (jackrabbit-jcr-benchmark)
   Framework for JCR performance tests.

 * Jackrabbit Core (jackrabbit-core)
   Core of the Apache Jackrabbit content repository implementation.

 * Jackrabbit Text Extractors (jackrabbit-text-extractors)
   Text extractor classes that allow Jackrabbit to extract text content
   from binary properties for full text indexing.

 * Jackrabbit JCR-RMI (jackrabbit-jcr-rmi)
   RMI remoting layer for the JCR API.

 * Jackrabbit WebDAV Library (jackrabbit-webdav)
   Interfaces and common utility classes used for building a
   WebDAV server or client.

 * Jackrabbit JCR Server (jackrabbit-jcr-server)
   WebDAV servlet implementations based on JCR.

 * Jackrabbit JCR Servlets (jackrabbit-jcr-servlet)
   Set of servlets and other classes designed to make it easier to use
   Jackrabbit and other JCR content repositories in web applications.

 * Jackrabbit Repository Classloader (jackrabbit-classloader)
   Java classloader for loading classes from JCR content repositories.

 * Jackrabbit Web Application (jackrabbit-webapp)
   Deployable Jackrabbit installation with WebDAV support for JCR.

 * Jackrabbit JCA Resource Adapter (jackrabbit-jca)
   J2EE Connector Architecture (JCA) resource adapter for Jackrabbit.

 * Jackrabbit SPI (jackrabbit-spi)
   The SPI defines a layer within a JSR-170 implementation that separates
   the transient space from the persistent layer.

 * Jackrabbit SPI Commons (jackrabbit-spi-commons)
   This component contains generic utility classes that might be used
   to build an SPI implementation.

 * Jackrabbit SPI2JCR (jackrabbit-spi2jcr)
   This component contains a SPI implementation wrapping around an
   implementation of JSR-170.

 * Jackrabbit JCR2SPI (jackrabbit-jcr2spi)
   This component contains an implementation of the JSR-170 API and
   covers the functionality that is not delegated to the SPI
   implementation.

 * Jackrabbit Standalone (jackrabbit-standalone)
   Jackrabbit server in a self-contained runnable jar.

 * Jackrabbit OCM (jackrabbit-ocm)
   Object-Content mapping tool for persisting and accessing Java objects
   in a JCR content repository.

 * Jackrabbit OCM Node Management (jackrabbit-ocm-nodemanagement)
   This component simplifies registration of node types and namespaces
   referenced in OCM mapping descriptors.

Can't make ApacheCon this week in New Orleans? You can still watch all the keynotes, Apache 101 sessions, and system administration track in live video streams.

All keynote sessions are free; the full sysadmin track, including httpd performance, security, and server stack administration talks are available for a fee. Please keep in mind that New Orleans is CST or UTC/GMT -6 hours.

Keynote sessions include:

• Jim Jagielski, The Apache Software Foundation - (Wednesday, 5th November 2008)
• David Recordon, Six Apart, Open Web Foundation - (Wednesday, 5th November 2008)
• Shahani Markus Weerawarana - (Thursday, 6th November 2008)
• Sam Ramji, Microsoft - (Friday, 7th November 2008)