This is an automated email from the ASF dual-hosted git repository.
jacopoc pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ofbiz-site.git
The following commit(s) were added to refs/heads/master by this push:
new 4422a47 Add new release information.
4422a47 is described below
commit 4422a4776dda3808345c41535204de94b603ebae
Author: Jacopo Cappellato <jacopo.cappell...@gmail.com>
AuthorDate: Mon Dec 4 09:57:22 2023 +0100
Add new release information.
---
download.html | 20 ++-
download.html => release-notes-18.12.10.html | 227 ++++-----------------------
template/page/download.tpl.php | 20 ++-
template/page/release-notes-18.12.10.tpl.php | 42 +++++
4 files changed, 97 insertions(+), 212 deletions(-)
diff --git a/download.html b/download.html
index a2799b8..9576389 100644
--- a/download.html
+++ b/download.html
@@ -141,13 +141,17 @@
<div class="tab-pane active" id="tabs-1">
<ul>
<li>
- <h2>OFBiz 18.12.09</h2>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" class="moreLink">→ Download</a>
+ <h2>OFBiz 18.12.10</h2>
+ <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.10.zip";
target="external" class="moreLink">→ Download</a>
</li>
</ul>
</div>
<div class="tab-pane" id="tabs-2">
<ul>
+ <li>
+ <h2>OFBiz 18.12.10</h2>
+ <a href="release-notes-18.12.10.html"
class="moreLink">→ View</a>
+ </li>
<li>
<h2>OFBiz 18.12.09</h2>
<a href="release-notes-18.12.09.html"
class="moreLink">→ View</a>
@@ -280,14 +284,14 @@
<p>The history of security related fixes included in each release
is
available <a href="security.html">here</a></p>
- <h2>Apache OFBiz 18.12.09</h2>
+ <h2>Apache OFBiz 18.12.10</h2>
<div class="divider"><span></span></div>
- <p> Released on November 2023, this is the ninth release of the
18.12 series, that has been stabilized since December 2018.</p>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" >Download OFBiz 18.12.09</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.asc";
target="external">[PGP]</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.sha512";
target="external">[SHA512]</a>
+ <p> Released on December 2023, this is the tenth release of the
18.12 series, that has been stabilized since December 2018.</p>
+ <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.10.zip";
target="external" >Download OFBiz 18.12.10</a>
+ <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.10.zip.asc";
target="external">[PGP]</a>
+ <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.10.zip.sha512";
target="external">[SHA512]</a>
<a href="https://downloads.apache.org/ofbiz/KEYS";
target="external">[KEYS]</a>
- <a href="release-notes-18.12.09.html">[Release Notes]</a>
+ <a href="release-notes-18.12.10.html">[Release Notes]</a>
<p><strong>We strongly encourage OfBiz users to report security
problems affecting OFBiz to the private security mailing lists (either
secur...@ofbiz.apache.org or secur...@apache.org),
before disclosing them in a public forum. Please don't pack
several vulnerabilities in the same report, send them one by one, thanks in
advance.</strong></p>
diff --git a/download.html b/release-notes-18.12.10.html
similarity index 55%
copy from download.html
copy to release-notes-18.12.10.html
index a2799b8..54e8e5f 100644
--- a/download.html
+++ b/release-notes-18.12.10.html
@@ -6,7 +6,7 @@
<!--[if (gte IE 9)|!(IE)]><!-->
<head>
<meta charset="utf-8">
-<title>The Apache OFBiz® Project - Downloads</title>
+<title>The Apache OFBiz® Project - Release Notes 18.12.10</title>
<meta name="Description" content="OFBiz is an open source enterprise
automation software project licensed under the Apache License. It means you are
not alone and can work with many others." />
<meta name="Robots" content="index,follow" />
<!-- Mobile Specific Metas
@@ -112,210 +112,45 @@
<!-- header -->
<!-- globalWrapper -->
<div id="globalWrapper">
-
-<!-- content -->
- <!-- page content -->
- <section id="content" class="sidebar">
+ <!-- page content -->
+ <section id="content" class="fullWidth">
<header class="headerPage">
<div class="container clearfix">
<div class="row">
- <h1 class="span8">Downloads</h1>
- <div class="span4" id="navTrail"> <a href="index.html"
class="homeLink">home</a><span>/</span><a href="#">Community</a><span>/</span>
<span class="current">Downloads</span> </div>
+ <h1 class="span8">Release Notes 18.12.10</h1>
+ <div class="span4" id="navTrail"> <a href="index.html"
class="homeLink">home</a><span>/</span><a
href="download.html">Download</a><span>/</span><span class="current">Release
Notes 18.12.10</span> </div>
</div>
</div>
</header>
- <div class="slice clearfix">
+ <section id="content" class="features" >
+ <div class="slice clearfix">
<div class="container">
- <div class="row">
- <!-- sidebar -->
- <aside class="span4" id="sidebar">
-
- <section class="widget blogUpdates">
- <h2>Releases for Download</h2>
- <div class="divider"><span></span></div>
- <ul class="nav nav-tabs " id="myTab">
- <li class="active"><a href="#tabs-1"
data-toggle="tab">Downloads</a></li>
- <li><a href="#tabs-2" data-toggle="tab">Release Notes</a></li>
- </ul>
- <div class="tab-content">
- <div class="tab-pane active" id="tabs-1">
- <ul>
- <li>
- <h2>OFBiz 18.12.09</h2>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" class="moreLink">→ Download</a>
- </li>
- </ul>
- </div>
- <div class="tab-pane" id="tabs-2">
- <ul>
- <li>
- <h2>OFBiz 18.12.09</h2>
- <a href="release-notes-18.12.09.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.08</h2>
- <a href="release-notes-18.12.08.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.07</h2>
- <a href="release-notes-18.12.07.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.06</h2>
- <a href="release-notes-18.12.06.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.05</h2>
- <a href="release-notes-18.12.05.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.04</h2>
- <a href="release-notes-18.12.04.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.03</h2>
- <a href="release-notes-18.12.03.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.02</h2>
- <a href="release-notes-18.12.02.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 18.12.01</h2>
- <a href="release-notes-18.12.01.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.09</h2>
- <a href="release-notes-17.12.09.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.08</h2>
- <a href="release-notes-17.12.08.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.07</h2>
- <a href="release-notes-17.12.07.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.06</h2>
- <a href="release-notes-17.12.06.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.05</h2>
- <a href="release-notes-17.12.05.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.04</h2>
- <a href="release-notes-17.12.04.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.03</h2>
- <a href="release-notes-17.12.03.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.02</h2>
- <a href="release-notes-17.12.02.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 17.12.01</h2>
- <a href="release-notes-17.12.01.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.07</h2>
- <a href="release-notes-16.11.07.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.06</h2>
- <a href="release-notes-16.11.06.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.05</h2>
- <a href="release-notes-16.11.05.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.04</h2>
- <a href="release-notes-16.11.04.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.03</h2>
- <a href="release-notes-16.11.03.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 16.11.01</h2>
- <a href="release-notes-16.11.01.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 13.07.03</h2>
- <a href="release-notes-13.07.03.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 13.07.02</h2>
- <a href="release-notes-13.07.02.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 13.07.01</h2>
- <a href="release-notes-13.07.01.html"
class="moreLink">→ View</a>
- </li>
- <li>
- <h2>OFBiz 12.04.06</h2>
- <a href="release-notes-12.04.06.html"
class="moreLink">→ View</a>
- </li>
- </ul>
- </div>
- </div>
- </section>
- </aside>
- <!-- sidebar -->
- <div class="span8">
- <h2>Download Apache OFBiz</h2>
- <div class="divider"><span></span></div>
- <div class="imgWrapper"> <img src="images/Download.jpg" alt="image
fullwidth"> </div>
- <p> <strong> Use the links below to download Apache OFBiz releases
from the "Apache Download Mirrors" page. The download page also includes
instructions on how to verify the integrity of the release file using the
signature and hash (PGP, SHA512) available for each release. If you need more
information about why and how to verify the integrity of the release file <a
href="http://www.apache.org/info/verification.html"; class="moreLink">this
→ page is what you look for</a>< [...]
-
- <p> <strong> Then, to install OFBiz, follow the explanations in
the "INSTALL" file found in the just downloaded/extracted OFBiz main
directory.</strong> </p>
-
- <p> <strong>PLEASE NOTE:</strong> Despite our best efforts to
maintain up to three active release branches, support for older branches can
decrease because our project volunteers may be focused on other issues. We
recommend using releases from the most recent branch wherever possible. </p>
-
- <p><strong>NOTE: To minimize the risk of security vulnerabilities
the Apache OFBiz community highly recommends that all users upgrade to the
latest stable release.</strong></p>
- <p>The history of security related fixes included in each release
is
-available <a href="security.html">here</a></p>
-
- <h2>Apache OFBiz 18.12.09</h2>
- <div class="divider"><span></span></div>
- <p> Released on November 2023, this is the ninth release of the
18.12 series, that has been stabilized since December 2018.</p>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" >Download OFBiz 18.12.09</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.asc";
target="external">[PGP]</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.sha512";
target="external">[SHA512]</a>
- <a href="https://downloads.apache.org/ofbiz/KEYS";
target="external">[KEYS]</a>
- <a href="release-notes-18.12.09.html">[Release Notes]</a>
-
- <p><strong>We strongly encourage OfBiz users to report security
problems affecting OFBiz to the private security mailing lists (either
secur...@ofbiz.apache.org or secur...@apache.org),
- before disclosing them in a public forum. Please don't pack
several vulnerabilities in the same report, send them one by one, thanks in
advance.</strong></p>
+<div class="row">
+ <div>
+ <p>Apache OFBiz® 18.12.10, released on December 2023, is the tenth
release of the 18.12 series, that has been stabilized since December 2018.</p>
+ Release Notes - OFBiz - Version 18.12.10
+
+<h2> Sub-task
+</h2>
+<ul>
+<li>[<a
href='https://issues.apache.org/jira/browse/OFBIZ-12866'>OFBIZ-12866</a>] -
Upgrade Apache Shiro to 1.13.0 to fix CVE-2023-46750
+</li>
+</ul>
+
+<h2> Task
+</h2>
+<ul>
+<li>[<a
href='https://issues.apache.org/jira/browse/OFBIZ-12856'>OFBIZ-12856</a>] -
Use docker containers to host demo-stable
+</li>
+</ul>
- <p>Note that we no longer create CVEs for post-auth attacks done
using demo credentials, notably using the admin user.
- <strong> <a href="https://s.apache.org/dsj2p";> Rather create bugs
reports in our issue tracker (Jira) for that.</a><span style="color:red">
Please don't create Jira issues for unauth (aka pre-auth) reports, thanks in
advance.</span></strong></p>
-
-
- <p>One of the reason we no longer create CVEs for post-auth
attacks done using demo credentials is because
- <a
href="https://nightlies.apache.org/ofbiz/trunk/readme/html5/#security";
target="external"> we highly suggest to OFBiz users to not use credentials demo
in production</a>
- and we expect OFBiz users to do so.
- <a
href="https://cwiki.apache.org/confluence/display/OFBIZ/Keeping+OFBiz+secure";
target="external"> We also warn our users on the "Keeping OFBiz secure wiki
page".</a>
- And finally, mostly we reject post-auth vulnerabilities because we
have a solid CSRF defense.</p>
-
-
- <h2>Earlier Releases</h2>
- <div class="divider"><span></span></div>
- <p>Older superseded releases of Apache OFBiz can be found in the
<a href="//archive.apache.org/dist/ofbiz/" target="external">Apache OFBiz
archive</a></p>
- <p>A description of each release in the history of OFBiz can be <a
href="//downloads.apache.org/ofbiz/" target="external">found here</a></p>
- </div>
- </div>
- </div>
- </div>
- </section>
-
-<!-- content -->
-<!-- footer -->
+ </div>
+</div>
+</div>
+</div>
+</section>
+</section><!-- footer -->
<footer class="footer1">
<div class="container" id="footer">
<div class="row">
diff --git a/template/page/download.tpl.php b/template/page/download.tpl.php
index 4a92e94..e51257e 100644
--- a/template/page/download.tpl.php
+++ b/template/page/download.tpl.php
@@ -30,13 +30,17 @@
<div class="tab-pane active" id="tabs-1">
<ul>
<li>
- <h2>OFBiz 18.12.09</h2>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" class="moreLink">→ Download</a>
+ <h2>OFBiz 18.12.10</h2>
+ <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.10.zip";
target="external" class="moreLink">→ Download</a>
</li>
</ul>
</div>
<div class="tab-pane" id="tabs-2">
<ul>
+ <li>
+ <h2>OFBiz 18.12.10</h2>
+ <a href="release-notes-18.12.10.html"
class="moreLink">→ View</a>
+ </li>
<li>
<h2>OFBiz 18.12.09</h2>
<a href="release-notes-18.12.09.html"
class="moreLink">→ View</a>
@@ -169,14 +173,14 @@
<p>The history of security related fixes included in each release
is
available <a href="security.html">here</a></p>
- <h2>Apache OFBiz 18.12.09</h2>
+ <h2>Apache OFBiz 18.12.10</h2>
<div class="divider"><span></span></div>
- <p> Released on November 2023, this is the ninth release of the
18.12 series, that has been stabilized since December 2018.</p>
- <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.09.zip";
target="external" >Download OFBiz 18.12.09</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.asc";
target="external">[PGP]</a>
- <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.09.zip.sha512";
target="external">[SHA512]</a>
+ <p> Released on December 2023, this is the tenth release of the
18.12 series, that has been stabilized since December 2018.</p>
+ <a
href="https://www.apache.org/dyn/closer.lua/ofbiz/apache-ofbiz-18.12.10.zip";
target="external" >Download OFBiz 18.12.10</a>
+ <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.10.zip.asc";
target="external">[PGP]</a>
+ <a
href="https://downloads.apache.org/ofbiz/apache-ofbiz-18.12.10.zip.sha512";
target="external">[SHA512]</a>
<a href="https://downloads.apache.org/ofbiz/KEYS";
target="external">[KEYS]</a>
- <a href="release-notes-18.12.09.html">[Release Notes]</a>
+ <a href="release-notes-18.12.10.html">[Release Notes]</a>
<p><strong>We strongly encourage OfBiz users to report security
problems affecting OFBiz to the private security mailing lists (either
secur...@ofbiz.apache.org or secur...@apache.org),
before disclosing them in a public forum. Please don't pack
several vulnerabilities in the same report, send them one by one, thanks in
advance.</strong></p>
diff --git a/template/page/release-notes-18.12.10.tpl.php
b/template/page/release-notes-18.12.10.tpl.php
new file mode 100644
index 0000000..6fb11f5
--- /dev/null
+++ b/template/page/release-notes-18.12.10.tpl.php
@@ -0,0 +1,42 @@
+<?php //Variable declarations for region templates
+ $head_title = '<title>The Apache OFBiz® Project - Release Notes
18.12.10</title>';
+?>
+ <!-- page content -->
+ <section id="content" class="fullWidth">
+ <header class="headerPage">
+ <div class="container clearfix">
+ <div class="row">
+ <h1 class="span8">Release Notes 18.12.10</h1>
+ <div class="span4" id="navTrail"> <a href="index.html"
class="homeLink">home</a><span>/</span><a
href="download.html">Download</a><span>/</span><span class="current">Release
Notes 18.12.10</span> </div>
+ </div>
+ </div>
+ </header>
+ <section id="content" class="features" >
+ <div class="slice clearfix">
+ <div class="container">
+<div class="row">
+ <div>
+ <p>Apache OFBiz® 18.12.10, released on December 2023, is the tenth
release of the 18.12 series, that has been stabilized since December 2018.</p>
+
+ Release Notes - OFBiz - Version 18.12.10
+
+<h2> Sub-task
+</h2>
+<ul>
+<li>[<a
href='https://issues.apache.org/jira/browse/OFBIZ-12866'>OFBIZ-12866</a>] -
Upgrade Apache Shiro to 1.13.0 to fix CVE-2023-46750
+</li>
+</ul>
+
+<h2> Task
+</h2>
+<ul>
+<li>[<a
href='https://issues.apache.org/jira/browse/OFBIZ-12856'>OFBIZ-12856</a>] -
Use docker containers to host demo-stable
+</li>
+</ul>
+
+ </div>
+</div>
+</div>
+</div>
+</section>
+</section>
\ No newline at end of file
