The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit version 1.5.2. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release. Release Notes -- Apache Jackrabbit -- Version 1.5.2 Introduction ------------ Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. See the Jackrabbit web site at http://jackrabbit.apache.org/ for more information. Apache Jackrabbit 1.5.2 is a security and bug fix release that fixes issues reported against previous releases. This release is fully compatible with the earlier 1.5.0 release. Most notably, this release fixes the following security vulnerability. Thanks to the Red Hat Security Response Team for reporting this issue. * CVE-2009-0026: Cross site scripting issues in webapp (JCR-1925) The search.jsp and swr.jsp pages in the Jackrabbit webapp are vulnerable to script injection. This release fixes the issue by properly escaping all user input. This issue affects both the Jackrabbit 1.4 and 1.5.0 releases. If you are unable to upgrade to 1.5.2 at this point, you can work around this issue by disabling the search.jsp and swr.jsp pages in the Jackrabbit webapp. See below for a full listing of fixes included in this release. Changes in this release ----------------------- All the fixes in this release are listed below per affected component. The modified components have had their version numbers upgraded to 1.5.2; other components are still at version 1.5.0. Jackrabbit version 1.5.1 was cancelled due to incorrect license headers in the source code. jackrabbit Bug fixes [JCR-1936] Incorrect license headers in multiple components jackrabbit-core Bug fixes [JCR-1823] Repository.login throws IllegalStateException [JCR-1838] Garbage collection deletes temporary files in FileDataStore [JCR-1846] Jackrabbit thread contention issue due to fat lock [JCR-1920] Custom LoginModule configurations broken in 1.5.0 [JCR-1931] SharedFieldCache$StringIndex memory leak causing OOM's jackrabbit-jcr-commons Bug fixes [JCR-1926] Text.unescape("%") throws a StringIndexOutOfBoundsException jackrabbit-jcr-server Bug fixes [JCR-1902] Warning while building DAV:parent-set for root-node resource jackrabbit-jcr-servlet Bug fixes [JCR-1910] RMIRemoteBindingServlet fails to initialize if the RMI ... jackrabbit-standalone Bug fixes [JCR-1912] RMI reference not automatically bound by the standalone server jackrabbit-webapp Security fixes [JCR-1925] CVE-2009-0026: Cross site scripting issues in webapp Bug fixes [JCR-1920] The 1.5.0 webapp points to 1.4 javadocs [JCR-1930] Extra in populate.jsp jackrabbit-webdav Bug fixes [JCR-1926] Text.unescape("%") throws a StringIndexOutOfBoundsException You can look up individual issues for more details in the Jackrabbit issue tracker at https://issues.apache.org/jira/browse/JCR. Release Contents ---------------- This release consists of a single source archive (jackrabbit-1.5.2-src.jar) that contains all the Apache Jackrabbit components. Use the following commands (or the equivalent in your system) to build the release with Maven 2 and Java 1.4 or higher: jar xf jackrabbit-1.5.2-src.jar cd jackrabbit-1.5.2-src mvn install Note that the OCM components require Java 5 or higher, and are not included in the build when using Java 1.4. The source archive is accompanied by SHA1 and MD5 checksums and a PGP signature that you can use to verify the authenticity of your download. The public key used for the PGP signature can be found at https://svn.apache.org/repos/asf/jackrabbit/dist/KEYS. The build will result in the following components (with artifactIds in parenthesis) being built and installed in your local Maven repository. Pre-built binary artifacts of these components are also available on the on the central Maven repository. * Jackrabbit Parent POM (jackrabbit-parent) The Maven parent POM for all Jackrabbit components. * Jackrabbit API (jackrabbit-api) Interface extensions that Apache Jackrabbit supports in addition to the standard JCR API. * Jackrabbit JCR Commons (jackrabbit-jcr-commons) General-purpose classes for use with the JCR API. * Jackrabbit JCR Tests (jackrabbit-jcr-tests) Set of JCR API test cases designed for testing the compliance of an implementation. Note that this is not the official JCR TCK! * Jackrabbit JCR Benchmarks (jackrabbit-jcr-benchmark) Framework for JCR performance tests. * Jackrabbit Core (jackrabbit-core) Core of the Apache Jackrabbit content repository implementation. * Jackrabbit Text Extractors (jackrabbit-text-extractors) Text extractor classes that allow Jackrabbit to extract text content from binary properties for full text indexing. * Jackrabbit JCR-RMI (jackrabbit-jcr-rmi) RMI remoting layer for the JCR API. * Jackrabbit WebDAV Library (jackrabbit-webdav) Interfaces and common utility classes used for building a WebDAV server or client. * Jackrabbit JCR Server (jackrabbit-jcr-server) WebDAV servlet implementations based on JCR. * Jackrabbit JCR Servlets (jackrabbit-jcr-servlet) Set of servlets and other classes designed to make it easier to use Jackrabbit and other JCR content repositories in web applications. * Jackrabbit Repository Classloader (jackrabbit-classloader) Java classloader for loading classes from JCR content repositories. * Jackrabbit Web Application (jackrabbit-webapp) Deployable Jackrabbit installation with WebDAV support for JCR. * Jackrabbit JCA Resource Adapter (jackrabbit-jca) J2EE Connector Architecture (JCA) resource adapter for Jackrabbit. * Jackrabbit SPI (jackrabbit-spi) The SPI defines a layer within a JSR-170 implementation that separates the transient space from the persistent layer. * Jackrabbit SPI Commons (jackrabbit-spi-commons) This component contains generic utility classes that might be used to build an SPI implementation. * Jackrabbit SPI2JCR (jackrabbit-spi2jcr) This component contains a SPI implementation wrapping around an implementation of JSR-170. * Jackrabbit JCR2SPI (jackrabbit-jcr2spi) This component contains an implementation of the JSR-170 API and covers the functionality that is not delegated to the SPI implementation. * Jackrabbit Standalone (jackrabbit-standalone) Jackrabbit server in a self-contained runnable jar. * Jackrabbit OCM (jackrabbit-ocm) Object-Content mapping tool for persisting and accessing Java objects in a JCR content repository. * Jackrabbit OCM Node Management (jackrabbit-ocm-nodemanagement) This component simplifies registration of node types and namespaces referenced in OCM mapping descriptors. ]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. Typical applications that use content repositories include content management, document management, and records management systems.

Apache Jackrabbit 1.3.1 is patch release with bug fixes and improvements for clustering, query, and other features.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

----

-- The Apache Jackrabbit Community

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Release Notes -- Apache Jackrabbit -- Version 1.3

Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. Typical applications that use content repositories include content management, document management, and records management systems.

Apache Jackrabbit 1.3 is an incremental feature release. The most notable changes in this release are support for query result highlighting, performance improvements thanks to a new bundle persistence manager, and a new classloader component for loading Java classes from a content repository. Many smaller improvements and bug fixes are also included.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

----

-- The Apache Jackrabbit Community

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. Typical applications that use content repositories include content management, document management, and records management systems.

Apache Jackrabbit 1.2.3 is patch release with bug fixes for issues like correctly reporting the number of access controlled query results and proper cleanup after indexing PDF documents. See the complete list of changes which can be found at RELEASE NOTES.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

----

-- The Apache Jackrabbit Community

]]> [ Category : Apache Jackrabbit ]

Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. Typical applications that use content repositories include content management, document management, and records management systems.

Apache Jackrabbit 1.2.2 is patch release that fixes a few issues reported since the 1.2.1 release and adds two clustering improvements. See the complete list of changes which are available from http://jackrabbit.apache.org/.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

See the issue tracker at http://issues.apache.org/jira/browse/JCR for more details.

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Apache Jackrabbit is a fully conforming implementation of the Content Repository for Java Technology API (JCR). A content repository is a hierarchical content store with support for structured and unstructured content, full text search, versioning, transactions, observation, and more. Typical applications that use content repositories include content management, document management, and records management systems.

Apache Jackrabbit 1.2.1 is an incremental release that introduces a number of new features, improvements, and bug fixes. The most notable changes in this release are the introduction of a clustering feature and various query improvements. The build environment has been upgraded to Maven 2 along with updates to the project structure and new versions of the Apache Lucene and Apache Derby dependencies.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

----

-- The Apache Jackrabbit community

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

The Apache Jackrabbit project is an effort to build and maintain an open source implementation of the Content Repository for Java Technology API (JCR) specified in the Java Specification Request 170 (JSR-170). The project also produces a various tools and components related to the JCR API.

Apache Jackrabbit 1.1.1 is a patch release that fixes a number of issues, see the change history for details. No new features or configuration changes have been introduced since the 1.1 release.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Release Notes -- Apache Jackrabbit -- Version 1.0.1

Introduction
------------

The Apache Jackrabbit project is an effort to build and maintain an open source implementation of the Content Repository for Java Technology API (JCR) specified in the Java Specification Request 170 (JSR-170).

Apache Jackrabbit 1.0.1 is a patch release that fixes a number of issues, see the included change history for details. No new features or configuration changes have been introduced since the 1.0 release.

Apache Jackrabbit 1.0.1 is a fully conforming and stable JSR-170 implementation. Developed from the same source tree as the JSR-170 reference implementation, the 1.0.1 release implements the full JCR API, including level 1, level 2, and all the optional features like versioning, transactions, and observation.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

----

-- The Apache Jackrabbit Community

]]> [ Category : Apache Jackrabbit ]

http://jackrabbit.apache.org/downloads.cgi

Release Notes -- Apache Jackrabbit -- Version 1.0

Introduction
------------

The Apache Jackrabbit project is an effort to build and maintain an open source implementation of the Content Repository for Java Technology API (JCR) specified in the Java Specification Request 170 (JSR-170).

Apache Jackrabbit 1.0 is a fully conforming and stable JSR-170 implementation. Developed from the same source tree as the JSR-170 reference implementation, the 1.0 release implements the full JCR API, including level 1, level 2, and all the optional features like versioning, transactions, and observation.

See the Apache Jackrabbit website at http://jackrabbit.apache.org/ for more information.

Release Contents
----------------

The main contents of this release are the Apache Jackrabbit core content repository implementation and the related general-purpose JCR utilities:

• jackrabbit-core-1.0-src.jar
• jackrabbit-core-1.0.jar
• jackrabbit-jcr-commons-1.0.jar

This release contains also additional components that offer extra functionality for use with either Apache Jackrabbit core or any JCR compliant content repository. These modules should be considered alpha quality:

• RMI network layer for the JCR API.
  • jackrabbit-jcr-rmi-1.0-src.jar
  • jackrabbit-jcr-rmi-1.0.jar
• Deployable Jackrabbit installation with WebDAV support for JCR.
  • jackrabbit-jcr-server-1.0-src.jar
  • jackrabbit-jcr-webdav-1.0.jar
  • jackrabbit-jcr-client-1.0.jar
  • jackrabbit-jcr-server-1.0.jar
  • jackrabbit-server-1.0.war
• J2EE Connector Architecture (JCA) resource adapter for Jackrabbit.
  • jackrabbit-jca-1.0-src.jar
  • jackrabbit-jca-1.0.rar
• Text indexing filters for Jackrabbit. Includes example filters for Adobe PDF and MS Excel, PowerPoint, and Word.
  • jackrabbit-index-filters-1.0-src.jar
  • jackrabbit-index-filters-1.0.jar

All components are released as a source jar file and one or more compiled binary files. All files contain a README.txt file with more information. Note that external runtime dependencies are only included for the war and rar archives. Other dependencies can be downloaded either manually or automatically using the Maven build system.

Each release file is accompanied by SHA1 and MD5 checksums and a PGP signature. The public key used for the signatures can be found in the KEYS file located in the parent directory.

Upgrading from 0.9
------------------

Due to a change in query functionality (JCR-257) a full rebuild of the full text indexes is required on existing content repositories when upgrading from the 0.9 release. Reindexing can be triggered by manually removing the index directories when the repository has been shut down. You should also add a repository-level SearchIndex configuration element to your repository configuration file if one is not already included.

Known Issues
------------

The known issues in this release are listed below:

• [JCR-382] Setting WebDAV property without value causes NPE in ...
• [JCR-381] Repository does not start if text filter dependencies are ...
• [JCR-374] Missing 'node removed' event when removing a version
• [JCR-371] ItemStateException on concurrently committing transactions ...
• [JCR-369] IllegalNameException when importing document view with ...
• [JCR-362] restore sometime throws error about missing tmp files
• [JCR-359] JCA project tests assume Windows paths
• [JCR-336] Concurrent locking operations fail
• [JCR-335] Deadlock caused by versioning operations within transaction
• [JCR-331] RepositoryConfig instance can not be reused once it has ...
• [JCR-325] docview roundtripping does not work with multivalue ...
• [JCR-323] import/export does not work on the root node
• [JCR-320] BinaryValue equals fails for two objects with two ...
• [JCR-299] errors in text filters can cause indexing to fail ...
• [JCR-285] Line-separator differences cause PredefinedNodeTypeTest ...
• [JCR-272] Removal of versions throws javax.jcr.ReferentialIntegrity...
• [JCR-140] Versioning might not be thread-safe
• [JCR-50] Persistence data of versioning not cleaned up correctly
• [JCR-43] Restore on node creates same-name-sibling of OPV-Version ...
• [JCR-18] Multithreading issue with versioning

Note that JCR-374 causes two observation unit test failures to be reported.

See the issue tracker at http://issues.apache.org/jira/browse/JCR for more details.

Change History
--------------

Changes since 1.0-rc3:

• [JCR-379] Remove the unneeded cqfs dependencies
• [JCR-378] jackrabbit-server.war is missing the slf4j-log4j12 library
• [JCR-377] Change project names to start with jackrabbit
• [JCR-376] JCR-RMI depends on commons-logging
• [JCR-368] Add support for simple test cases

Changes since 1.0-rc2:

• [JCR-375] jcr:encoding not respected in NodeIndexer
• [JCR-373] all references to incubator need to be replaced with new ...
• [JCR-370] SearchIndex class contains garbled String
• [JCR-365] Web client/WebDAV fails to unescape workspace names
• [JCR-357] Move to jackrabbit.apache.org
• [JCR-356] Replace license headers with new policy text
• [JCR-353] TransientRepository does not shutdown if first login fails
• [JCR-338] Query Builder and jcr:deref problem. Can't add predicate ...
• [JCR-333] NodeTypeDef depends on supertype ordering
• [JCR-257] Use separate index for jcr:system tree

Changes since 1.0-rc1:

• [JCR-363] Node.setProperty(String, ...) implementation not according to ...
• [JCR-354] Use a pre-generated version of XPath.jjt
• [JCR-351] Default to anonymous access when no Credentials are given
• [JCR-348] Add automatic default configuration
• [JCR-347] Jcr-server: Parsing NodeTypeProperty not compliant with definition
• [JCR-346] Jcr-Server: ItemDefinitionImpl.toXml throws NPE for the root node
• [JCR-345] Jcr-Server: DavException doesn't allow to specify an exception ...
• [JCR-344] Jcr-server: DeltaVResource lists MKWORKSPACE in the method ...
• [JCR-343] Jcr-server: Report#init limits the Report interface to DeltaV ...
• [JCR-342] Jcr-Server: DavResource#getDavSession() missing
• [JCR-341] Jcr-Server: registration of ReportTypes fails
• [JCR-340] Jcr-Server: ValuesProperty missing property type information
• [JCR-337] Jcr-Server: remove jcr depedency from dav-library
• [JCR-215] Code depends on Log4J directly

Changes since 0.9:

• [JCR-334] loadURI compile error with Maven 1.0.2
• [JCR-330] Include the README file in the generated jar files
• [JCR-329] NodeReferencesId.equals() is not symetric
• [JCR-328] TransientRepository with LocalFileSystem eventually ...
• [JCR-327] Mixins as supertypes do not appear to be queryable
• [JCR-326] Initialize the cause of a login exception in the repository
• [JCR-318] RepositoryHelper.unregisterRepository() does not allow ...
• [JCR-317] replace UUID strings by UUID classes in NodeId, etc..
• [JCR-316] Fixed README.txt on textfilters project
• [JCR-315] Support for OpenOffice text extraction
• [JCR-309] Extract the public API interfaces from o.a.j.core to o.a.j.api
• [JCR-308] Nodes having OPV=Ignore are removed on restore
• [JCR-307] serious performance degradation of node operations when ...
• [JCR-275] NodeTypeRegistry.unregisterNodeTypes(Collection) missing
• [JCR-156] Review test cases and cross check with 1.0 specification

Changes since 0.9-rc1:

• [JCR-109] Contrib RMI: NotSerializableException

Changes since the beginning:

The first Apache Jackrabbit release was the result of more than two years of development and contained the resolutions of more than 270 tracked issues. See the issue tracker for the full history.

----

-- The Apache Jackrabbit community

]]> [ Category : Apache Jackrabbit ]