From: Paul Sandoz <Paul.Sandoz_at_Sun.COM>
Date: Mon, 03 Aug 2009 16:37:59 +0200

Hi,

We are going to do a 1.0.3.1 release, most likely next week, that has
the following fixes:

   https://jersey.dev.java.net/issues/show_bug.cgi?id=276
   l10n resource bundles are not picked up at GlassFish v3 Jersey bundle

   https://jersey.dev.java.net/issues/show_bug.cgi?id=323
   All Jersey web services that accept XML are vulnerable to XXE attacks

Paul.