Skip to main content

Posts

Showing posts from November, 2012

Tomcat 7.0.33 Released

The Apache Tomcat team have announced the release of Apache Tomcat version 7.0.33. This latest release can be downloaded from the project's download page at  http://tomcat.apache.org/download-70.cgi . This release does not contain any major security fixes, but incorporates nearly 40 bug fixes and performance improvements. The notable changes for this release are said to be: A fix to the AccessLogValve to address a bug that caused some entries to be made with incorrect time stamps. A re-written, smaller, faster HTTP header parser. Further performance improvements for Jasper, Tomcat's JSP engine. The changelog for this relese can be viewed at  http://tomcat.apache.org/tomcat-7.0-doc/changelog.html .

SAP NetWeaver Cloud is Java EE 6 Web Profile Certified

A recent  post  on the SAP NetWeaver Cloud Developer Center states that SAP NetWeaver Cloud is now Java EE 6 Web Profile Certified. NetWeaver Cloud Developer now adds to the growing list of Java EE application servers that are certified against the Java EE 6 Web Profile. NetWeaver Cloud Developer is currently released as a beta version of the software, but supports the following Java EE technologies. Servlet 3.0 JavaServer Pages (JSP) 2.2# Expression Language (EL) 2.2 Debugging Support for Other Languages (JSR-45) 1.0 Standard Tag Library for JavaServer Pages (JSTL) 1.2 JavaServer Faces (JSF) 2.0 Common Annotations for the Java Platform (JSR-250) 1.1 Enterprise JavaBeans (EJB) 3.1 Lite Java Transaction API (JTA) 1.1 Java Persistence API (JPA) 2.0 Bean Validation 1.0 Managed Beans 1.0 Interceptors 1.1 Context and Dependency Injection for the Java EE Platform 1.0 Dependency Injection for Java 1.0 Java Mail 1.4 At the moment, this is a beta release and therefore "...

Apache Logging 2.0 Beta 3 Released

Do you use Apache Log4J for logging?  If so, then you may be interested to hear that the Apache Logging team has released the 3rd beta of Apache Log4J 2 - the successor to the popular logging framework Log4J. Log4J2 is an upgrade to the original Log4J providing many improvements such as separating the API from the implementation, providing better performance and automatically reloading configuration files upon modification. The full list of improvements over Log4J can ben found here . For full information about Log4J 2, check out the project website at  http://logging.apache.org/log4j/2.x/

Visual VM 1.3.5 Released

VisualVM, the "All-In-One Java Troubleshooting Tool" has been updated and released at version 1.3.5. This new release contains many  new features and enhancements and bug fixes . For those not familiar with VisualVM, it is " a visual tool integrating several commandline JDK tools and lightweight profiling capabilities. Designed for both production and development time use, it further enhances the capability of monitoring and performance analysis for the Java SE platform. " VisualVM is supported on Many different platforms that support JDK 6+.  A full list of supported platforms/JDKs can be found in the  release notes . VisualVM can be downloaded from the project's download site .

Spring Data JDBC Extension 1.0 GA Released

Thomas Risberg has announced that version 1.0 of the Spring Data JDBC Extensions project is now available providing Querydsl and advanced Oracle support. " The Spring Data JDBC Extensions project was created to provide additional support for vendor specific JDBC extensions as well as new approaches to working with JDBC like Querydsl. The bulk of the support consists of code ported from the SpringSource project "Advanced Pack for Oracle Database" that was available for support subscription customers. We are now making this code available to all Spring users and any new developments will be made in the Spring Data JDBC Extensions project. " The software can be downloaded from the project's  site. Further information on the Spring Data JDBC Extension can be found in the  Reference Documentation .

Feedback wanted on Java EE 7

In a recent post on the  Aquarium , Reza Rahman asks for feedback on the upcoming Java EE 7 which is now in the Early Draft Review stage. Java EE 7 is defined under  JSR-342 , the project page for the specification can be found on Java.net In his  post , Reza states: "There are now a number of important open issues that the Java EE expert group would like to get broad community feeback on. These issues include what new JSRs to add to the Java EE Full/Web Profile as well as how to better align CDI with Java EE. Help shape the future and voice your opinion on these critical open issues by taking the short survey posted  here ." If you want to get involved in the future of Java EE, they why not start today by completing the survey.

Tomcat Security Advisory - CVE-2012-2733 Apache Tomcat Denial of Service

An Apache Tomcat Denial of Service vulnerability has been identified in apache Tomcat versions 6.0.0 through 6.0.35 and 7.0.0 through 7.0.27 The vulnerability is decribed as: " The checks that limited the permitted size of request headers were implemented too late in the request parsing process for the HTTP NIO connector. This enabled a malicious user to trigger an OutOfMemoryError by sending a single request with very large headers. " Users are advised to upgrade to Apache Tomcat version 6.0.36 (or later) or 7.0.28 (or later).