Blog Better! Roller is the open source Java blog server that drives Apache Software Foundation blogs and others. Read more on the about page.

Site hosted by Digital Ocean



Main | Next page »

Apache Roller 6.1.4 is available

10.10.2024 by Dave Johnson | 0 Comments

The Apache Roller project is pleased to announce the release of Roller 6.1.4! This release includes several updates and improvements to enhance the security, stability, and functionality of your Roller installations.

Dowload the latest release from: 

    https://www.apache.org/dyn/closer.cgi/roller/roller-6.1/v6.1.4

Key Changes in Apache Roller 6.1.4

Safer defaults

As of Roller 6.1.4, several default settings have been updated to enhance security for multi-user weblog sites:

  • HTML content sanitization: Roller now sanitizes all HTML content by default to prevent malicious content. This is controlled by the weblogAdminsUntrusted=true property in your roller-custom.properties file.
  • Custom themes and file-uploads disabled by default. You can enable this feature via the Server Admin page if you trust your users, as these features can pose security risks.
  • Better CSRF and XSS protection by user-specific and one-time-use salts.

Dependency updates

Over 20 mostly minor dependency updates including Spring, Eclipse-Link JPA, Log4j, Lucene, and more.

Bug fixes

Fixed some bugs that impacted category create, update and delete.

Apache Roller 6.1.3 is available

06.12.2024 by Dave Johnson | 0 Comments

The Apache Roller project is pleased to announce the availability of Roller 6.1.3, a release that includes some minor bug fixes, dependency updates and input sanitization changes. If you run a multi-user Roller site and you do not trust your users, you should upgrade as this release fixed a couple of XSS vulnerabiltiies.

https://roller.apache.org/downloads/downloads.html

You can find some more details about the release in the vote thread here:

https://lists.apache.org/thread/xnnf63bdzmq7z08ptdptyg5c30rfvzq5

Thanks to all who helped out with this release!

Apache Roller 6.1.2 is available

08.03.2023 by Dave Johnson | 0 Comments

The Apache Roller project is pleased to announce the availability of Roller 6.1.2, a release that includes some minor bug fixes and input sanitization changes.

https://roller.apache.org/downloads/downloads.html

You can find some more details about the release in the vote thread here:

https://lists.apache.org/thread/7wq8gb0g143zzbd6ds0c1k2zm51gbv2h   

Thanks to all who helped out with this release!

Apache Roller 6.1.1 release is available

04.30.2022 by Dave Johnson | 0 Comments

The Apache Roller project is pleased to announce the availability of Roller 6.1.1, a release that upgrades many dependencies including  Spring, Struts, Lucene, Log4J, Guice and Bouncy Castle. The release and convenience binaries can be found on the Roller project download page here:


You can find some more details about the release in the vote thread here:


Thanks to all who helped out with this release!

Apache Roller 6.1.0 release is available

12.22.2021 by Dave Johnson | 0 Comments

The Apache Roller project is pleased to announce the availability of Roller 6.1.0, a release that upgrades over a dozen dependencies (including Log4J) and includes a number of bug fixes and improvements to the code-base. The release and convenience binaries can be found on the Roller project downloads page here:

https://roller.apache.org/downloads/downloads.html

You can find some more details about the release in the vote thread here:

https://lists.apache.org/thread/7334kfm8g5mlq1g0y8783ldfopdfc3sc

Thanks to all who helped out with this release!

Apache Roller 6.0.2 is available for download

08.16.2021 by Dave Johnson | 0 Comments

The Roller PMC has approved the release of Apache Roller 6.0.2, a minor bug fix release.

You can download the release via Apache mirrors link here:

Roller 6.0.2 includes the fixes listed below:

Parse referrer URL instead of using string value directly

Improved: the UI for the blog entries page

Improved: tooltip content on the registration form

Updated: the main menu to have proper space when displaying permission message

Updated: the header to show the tagline only when it's available

UI fixes are thanks to new contributor Yash Maheshwari.

On behalf of the Roller PMC,
Enjoy and best regards!

Apache Roller 6 released!

12.30.2019 by Dave Johnson | 0 Comments

The Apache Roller community is pleased to announce the release of Apache Roller 6.0.0, the latest and greatest release of Roller. For more details of the changes introduced with this new version please refer to the release notes in JIRA. In summary, Roller 6 is a new version of Roller with these features:

  • Web interface has been rewritten to use Twitter bootstrap via the Struts 2 Bootstrap tags.
  • Most dependencies have been upgraded to the latest version.
  • Compiled with Java 11 and requires Java 11.
  • The installation guide has been converted from OpenOffice to AsciiDocs.

It should be relatively easy to upgrade from Roller 5.2.4 to Roller 6 because there are no changes to the database schema (that means you can easily roll back if you find problems). The user interface is different and we hope you'll find it better, easier to use, more intuitive and with a more modern feel.

Thanks to the many contributors to Roller for this new release. We hope you'll enjoy and find it useful.

Apache Roller is available on the download page: 

    https://roller.apache.org/downloads/downloads.html 

For more information on Apache Roller, visit the project website:

    https://roller.apache.org 

Apache Roller 5.2.4 is available

08.12.2019 by Dave Johnson | 0 Comments

The Apache Roller community is pleased to announce the release of Roller v5.2.4, a bug fix release that fixes a problem introduced in Roller 5.2.3. The Xinha-based rich-text editor was broken in 5.2.3 and this release fixes that.

The release may be downloaded from the Roller project download page:

    http://roller.apache.org/downloads/downloads.html

Thanks,

The Apache Roller community

Main | Next page »