This is an automated email from the ASF dual-hosted git repository.
solomax pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openmeetings.git
The following commit(s) were added to refs/heads/master by this push:
new 25f0cc2d7 Switching to the next dev version
25f0cc2d7 is described below
commit 25f0cc2d7a7f02495f46f100a2984035363f4c02
Author: Maxim Solodovnik <[email protected]>
AuthorDate: Mon Jul 13 13:46:06 2026 +0700
Switching to the next dev version
---
CHANGELOG.md | 18 ++++++++
README.md | 26 +++++++++--
openmeetings-core/pom.xml | 2 +-
openmeetings-db/pom.xml | 2 +-
openmeetings-install/pom.xml | 2 +-
openmeetings-mediaserver/pom.xml | 2 +-
openmeetings-screenshare/pom.xml | 2 +-
openmeetings-server/pom.xml | 2 +-
.../src/site/markdown/NewsArchive.md | 53 ++++++++++++++++++++++
openmeetings-server/src/site/markdown/index.md | 26 ++++-------
openmeetings-server/src/site/xdoc/downloads.xml | 30 ++++++------
openmeetings-service/pom.xml | 2 +-
openmeetings-tests/pom.xml | 2 +-
openmeetings-util/pom.xml | 2 +-
openmeetings-web/pom.xml | 2 +-
openmeetings-webservice/pom.xml | 2 +-
pom.xml | 4 +-
17 files changed, 129 insertions(+), 50 deletions(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index b08350d89..5756631db 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,6 +6,24 @@ See https://issues.apache.org/jira/browse/OPENMEETINGS-*
(where * is the number
See https://www.cve.org/CVERecord?id=CVE-* (where * is the number of CVE below)
+Release Notes - Openmeetings - Version 9.1.0
+================================================================================================================
+
+* Vulnerability
+ * CVE-2026-49488: Apache OpenMeetings: Arbitrary File Read
+
+* Bug
+ * [OPENMEETINGS-2821] - WB download service must better check file being
downloaded
+
+* Improvement
+ * [OPENMEETINGS-2818] - Swagger generation should be added
+
+* Task
+ * [OPENMEETINGS-2819] - (9.1.0) Libraries should be updated
+ * [OPENMEETINGS-2820] - Default git branches should be protected
+ * [OPENMEETINGS-2823] - (9.1.0) Sonar issues need to be addressed
+
+
Release Notes - Openmeetings - Version 9.0.0
================================================================================================================
diff --git a/README.md b/README.md
index bc8accbae..4d7153c5a 100644
--- a/README.md
+++ b/README.md
@@ -58,12 +58,30 @@ See the [CHANGELOG.md](/CHANGELOG.md) file for a detailed
log.
### Recent Releases
+<details>
+ <summary>Release 9.1.0 - Security.</summary>
+
+9.1.0
+-----
+[Release 9.1.0](https://www.apache.org/dyn/closer.lua/openmeetings/9.1.0),
provides following improvements:
+
+IMPORTANT: Java 21 and KMS 7.3.0+ are required
+
+Security:
+* More security checks in WB download service
+* Default git branches are protected
+* All libraries are updated to most recent versions
+
+***1 security vulnerabilities were addressed***
+
+Some other fixes and improvements, 5 issues were addressed
+</details>
<details>
<summary>Release 9.0.0 - Security, SIP and Dark theme.</summary>
9.0.0
-----
-[Release 9.0.0](https://www.apache.org/dyn/closer.lua/openmeetings/9.0.0),
provides following improvements:
+[Release 9.0.0](https://www.apache.org/dist/openmeetings/9.0.0), provides
following improvements:
IMPORTANT: Java 21 and KMS 7.3.0+ are required
@@ -97,7 +115,7 @@ WB:
Some other fixes and improvements, 9 issues were addressed
</details>
<details>
- <summary>Release 8.0.0 - Security updates, switching to Tomcat 11 and
Jakarta stack.</summary>
+ <summary>Older Releases Details:</summary>
8.0.0
-----
@@ -113,9 +131,7 @@ UI:
***1 security vulnerability was addressed***
Some other fixes and improvements, 8 issues were addressed
-</details>
-<details>
- <summary>Older Releases Details:</summary>
+
7.2.0
-----
diff --git a/openmeetings-core/pom.xml b/openmeetings-core/pom.xml
index 2a27a8b48..2849dd33e 100644
--- a/openmeetings-core/pom.xml
+++ b/openmeetings-core/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-core</artifactId>
diff --git a/openmeetings-db/pom.xml b/openmeetings-db/pom.xml
index 7e37f83e7..3e52e2b52 100644
--- a/openmeetings-db/pom.xml
+++ b/openmeetings-db/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-db</artifactId>
diff --git a/openmeetings-install/pom.xml b/openmeetings-install/pom.xml
index c76c3c313..4458c51cf 100644
--- a/openmeetings-install/pom.xml
+++ b/openmeetings-install/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-install</artifactId>
diff --git a/openmeetings-mediaserver/pom.xml b/openmeetings-mediaserver/pom.xml
index 2d740ae03..cfd4a684f 100644
--- a/openmeetings-mediaserver/pom.xml
+++ b/openmeetings-mediaserver/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-mediaserver</artifactId>
diff --git a/openmeetings-screenshare/pom.xml b/openmeetings-screenshare/pom.xml
index 104e9d53d..6c1992242 100644
--- a/openmeetings-screenshare/pom.xml
+++ b/openmeetings-screenshare/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-screenshare</artifactId>
diff --git a/openmeetings-server/pom.xml b/openmeetings-server/pom.xml
index d3ceba7a2..09ae68fc3 100644
--- a/openmeetings-server/pom.xml
+++ b/openmeetings-server/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-server</artifactId>
diff --git a/openmeetings-server/src/site/markdown/NewsArchive.md
b/openmeetings-server/src/site/markdown/NewsArchive.md
index 0192e210e..469403d80 100644
--- a/openmeetings-server/src/site/markdown/NewsArchive.md
+++ b/openmeetings-server/src/site/markdown/NewsArchive.md
@@ -1,6 +1,59 @@
<!--
Licensed under the Apache License, Version 2.0 (the "License")
http://www.apache.org/licenses/LICENSE-2.0
-->
+# Release 9.0.0
+
+{{% card class="om-callout border-info" %}}
+
+<!--
+<card-body>
+ <h4 class="card-title">Version 9.0.0 released!</h4>
+ <p class="card-text">
+ Release 9.0.0, provides following improvements:<br/>
+ <div class="om-callout border-danger">
+ Security vulnerabilities:<br/>
+ <b>CVE-2026-33005: Apache OpenMeetings: Insufficient
checks in FileWebService</b><br/>
+ <b>CVE-2026-33266: Apache OpenMeetings: Hardcoded
Remember-Me Cookie Encryption Key and Salt</b><br/>
+ <b>CVE-2026-34020: Apache OpenMeetings: Login
Credentials Passed via GET Query Parameters</b><br/>
+ were fixed, please check <a
href="security.html">Security Page</a><br/>
+ </div>
+ <div class="om-callout border-info">
+ IMPORTANT: Java 21 and KMS 7.3.0+ are required
+ </div>
+ <br/>
+
+ Security:
+ <ul>
+ <li>Weak hash functions are dropped</li>
+ <li>'Remember Me' is more secure</li>
+ <li>All libraries are updated to most recent
versions</li>
+ </ul>
+
+ UI:
+ <ul>
+ <li>fabric.js is updated to most recent version</li>
+ <li>Dark theme is added</li>
+ <li>File deletion via trash button click is fixed</li>
+ </ul>
+ <br/>
+ <br/>
+ Other fixes and improvements
+ <br/>
+
+ <span>
+ 15 issues are fixed please check <br/>
+ <a
href="https://www.apache.org/dist/openmeetings/9.0.0/CHANGELOG.md";>CHANGELOG</a>
and
+ <a
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12312720&version=12356267";>Detailed
list</a>
+ </span>
+ </p>
+ <footer>
+ <span> See <a
href="https://archive.apache.org/dist/openmeetings/9.0.0";>Archived
download</a>.</span>
+ <span class="text-info float-right">(2026-03-31)</span>
+ </footer>
+</card-body>
+-->
+
+{{% /card %}}
# Release 8.1.0
diff --git a/openmeetings-server/src/site/markdown/index.md
b/openmeetings-server/src/site/markdown/index.md
index a89161f4c..8ca16f61e 100644
--- a/openmeetings-server/src/site/markdown/index.md
+++ b/openmeetings-server/src/site/markdown/index.md
@@ -85,14 +85,12 @@ will receive no updates anymore. The website at Apache is
the only place that re
<!--
<card-body>
- <h4 class="card-title">Version 9.0.0 released!</h4>
+ <h4 class="card-title">Version 9.1.0 released!</h4>
<p class="card-text">
- Release 9.0.0, provides following improvements:<br/>
+ Release 9.1.0, provides following improvements:<br/>
<div class="om-callout border-danger">
Security vulnerabilities:<br/>
- <b>CVE-2026-33005: Apache OpenMeetings: Insufficient
checks in FileWebService</b><br/>
- <b>CVE-2026-33266: Apache OpenMeetings: Hardcoded
Remember-Me Cookie Encryption Key and Salt</b><br/>
- <b>CVE-2026-34020: Apache OpenMeetings: Login
Credentials Passed via GET Query Parameters</b><br/>
+ <b>CVE-2026-49488: Apache OpenMeetings: Arbitrary File
Read</b><br/>
were fixed, please check <a
href="security.html">Security Page</a><br/>
</div>
<div class="om-callout border-info">
@@ -102,31 +100,25 @@ will receive no updates anymore. The website at Apache is
the only place that re
Security:
<ul>
- <li>Weak hash functions are dropped</li>
- <li>'Remember Me' is more secure</li>
+ <li>More security checks in WB download service</li>
+ <li>Default git branches are protected</li>
<li>All libraries are updated to most recent
versions</li>
</ul>
- UI:
- <ul>
- <li>fabric.js is updated to most recent version</li>
- <li>Dark theme is added</li>
- <li>File deletion via trash button click is fixed</li>
- </ul>
<br/>
<br/>
Other fixes and improvements
<br/>
<span>
- 15 issues are fixed please check <br/>
- <a
href="https://www.apache.org/dist/openmeetings/9.0.0/CHANGELOG.md";>CHANGELOG</a>
and
- <a
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12312720&version=12356267";>Detailed
list</a>
+ 5 issues are fixed please check <br/>
+ <a
href="https://www.apache.org/dist/openmeetings/9.1.0/CHANGELOG.md";>CHANGELOG</a>
and
+ <a
href="https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12312720&version=12356827";>Detailed
list</a>
</span>
</p>
<footer>
<span> See <a href="downloads.html">Downloads page</a>.</span>
- <span class="text-info float-right">(2026-03-31)</span>
+ <span class="text-info float-right">(2026-07-08)</span>
</footer>
</card-body>
-->
diff --git a/openmeetings-server/src/site/xdoc/downloads.xml
b/openmeetings-server/src/site/xdoc/downloads.xml
index 5ce6e05e2..c960830f1 100644
--- a/openmeetings-server/src/site/xdoc/downloads.xml
+++ b/openmeetings-server/src/site/xdoc/downloads.xml
@@ -32,21 +32,21 @@
</p>
<subsection name="Latest Official WebRTC Release">
<p>
- Apache OpenMeetings 9.0.0
+ Apache OpenMeetings 9.1.0
</p>
<ul>
<li>
Binaries:
<ul>
<li>
- <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.zip";>apache-openmeetings-9.0.0.zip</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.zip.asc";>[SIG]</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.zip.sha512";>[SHA512]</a>
+ <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.zip";>apache-openmeetings-9.1.0.zip</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.zip.asc";>[SIG]</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.zip.sha512";>[SHA512]</a>
</li>
<li>
- <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.tar.gz";>apache-openmeetings-9.0.0.tar.gz</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.tar.gz.asc";>[SIG]</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/bin/apache-openmeetings-9.0.0.tar.gz.sha512";>[SHA512]</a>
+ <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.tar.gz";>apache-openmeetings-9.1.0.tar.gz</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.tar.gz.asc";>[SIG]</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/bin/apache-openmeetings-9.1.0.tar.gz.sha512";>[SHA512]</a>
</li>
</ul>
</li>
@@ -54,22 +54,22 @@
Sources:
<ul>
<li>
- <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.zip";>apache-openmeetings-9.0.0-src.zip</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.zip.asc";>[SIG]</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.zip.sha512";>[SHA512]</a>
+ <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.zip";>apache-openmeetings-9.1.0-src.zip</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.zip.asc";>[SIG]</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.zip.sha512";>[SHA512]</a>
</li>
<li>
- <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.tar.gz";>apache-openmeetings-9.0.0-src.tar.gz</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.tar.gz.asc";>[SIG]</a>
- <a
href="https://downloads.apache.org/openmeetings/9.0.0/src/apache-openmeetings-9.0.0-src.tar.gz.sha512";>[SHA512]</a>
+ <a
href="https://www.apache.org/dyn/closer.lua/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.tar.gz";>apache-openmeetings-9.1.0-src.tar.gz</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.tar.gz.asc";>[SIG]</a>
+ <a
href="https://downloads.apache.org/openmeetings/9.1.0/src/apache-openmeetings-9.1.0-src.tar.gz.sha512";>[SHA512]</a>
</li>
</ul>
</li>
<li>
- Changes: <a
href="https://downloads.apache.org/openmeetings/9.0.0/CHANGELOG.md";>CHANGELOG.md</a>.
+ Changes: <a
href="https://downloads.apache.org/openmeetings/9.1.0/CHANGELOG.md";>CHANGELOG.md</a>.
</li>
<li>
- Docker image: <a
href="https://github.com/openmeetings/openmeetings-docker/tree/9.0.0";>https://github.com/openmeetings/openmeetings-docker/tree/9.0.0</a>
+ Docker image: <a
href="https://github.com/openmeetings/openmeetings-docker/tree/9.1.0";>https://github.com/openmeetings/openmeetings-docker/tree/9.1.0</a>
</li>
<li>
<a
href="https://cwiki.apache.org/confluence/display/OPENMEETINGS/Live+iso+OpenMeetings+on+Ubuntu";>Live
OM iso images by Alvaro</a>
diff --git a/openmeetings-service/pom.xml b/openmeetings-service/pom.xml
index 74d776b17..de8d5a1d2 100644
--- a/openmeetings-service/pom.xml
+++ b/openmeetings-service/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-service</artifactId>
diff --git a/openmeetings-tests/pom.xml b/openmeetings-tests/pom.xml
index 5ff4a24a0..034b073e8 100644
--- a/openmeetings-tests/pom.xml
+++ b/openmeetings-tests/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-tests</artifactId>
diff --git a/openmeetings-util/pom.xml b/openmeetings-util/pom.xml
index 8f5f06c16..cbe53ce25 100644
--- a/openmeetings-util/pom.xml
+++ b/openmeetings-util/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-util</artifactId>
diff --git a/openmeetings-web/pom.xml b/openmeetings-web/pom.xml
index 1402dc24e..e6748f194 100644
--- a/openmeetings-web/pom.xml
+++ b/openmeetings-web/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-web</artifactId>
diff --git a/openmeetings-webservice/pom.xml b/openmeetings-webservice/pom.xml
index d0fae92a1..ee143f2c9 100644
--- a/openmeetings-webservice/pom.xml
+++ b/openmeetings-webservice/pom.xml
@@ -22,7 +22,7 @@
<parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<relativePath>..</relativePath>
</parent>
<artifactId>openmeetings-webservice</artifactId>
diff --git a/pom.xml b/pom.xml
index 478ed1cd6..0b4035c51 100644
--- a/pom.xml
+++ b/pom.xml
@@ -26,13 +26,13 @@
</parent>
<groupId>org.apache.openmeetings</groupId>
<artifactId>openmeetings-parent</artifactId>
- <version>9.1.0-SNAPSHOT</version>
+ <version>9.2.0-SNAPSHOT</version>
<packaging>pom</packaging>
<name>Openmeetings</name>
<description>Parent project for all OpenMeetings Maven modules.
Required to hold general settings</description>
<properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
-
<project.build.outputTimestamp>2026-04-05T04:26:13Z</project.build.outputTimestamp>
+
<project.build.outputTimestamp>2026-07-13T06:45:35Z</project.build.outputTimestamp>
<wicket.configuration>DEPLOYMENT</wicket.configuration>
<om.quick.build>false</om.quick.build>
<om.notquick.build>true</om.notquick.build>
