james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From adup...@apache.org
Subject [4/7] james-project git commit: JAMES-2197 Add release note for 3.0.1
Date Mon, 30 Oct 2017 13:50:24 GMT
JAMES-2197 Add release note for 3.0.1


Project: http://git-wip-us.apache.org/repos/asf/james-project/repo
Commit: http://git-wip-us.apache.org/repos/asf/james-project/commit/05b31213
Tree: http://git-wip-us.apache.org/repos/asf/james-project/tree/05b31213
Diff: http://git-wip-us.apache.org/repos/asf/james-project/diff/05b31213

Branch: refs/heads/master
Commit: 05b3121361deab68730b3cd1086538b0e1ee9c03
Parents: 2140f42
Author: Antoine Duprat <aduprat@linagora.com>
Authored: Thu Oct 26 11:15:47 2017 +0200
Committer: Antoine Duprat <aduprat@linagora.com>
Committed: Thu Oct 26 11:15:47 2017 +0200

----------------------------------------------------------------------
 src/site/xdoc/download.xml             |  8 ++++----
 src/site/xdoc/server/release-notes.xml | 18 ++++++++++++++++++
 2 files changed, 22 insertions(+), 4 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/james-project/blob/05b31213/src/site/xdoc/download.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/download.xml b/src/site/xdoc/download.xml
index fe19bf3..ef59f52 100644
--- a/src/site/xdoc/download.xml
+++ b/src/site/xdoc/download.xml
@@ -141,7 +141,7 @@ is found <a href='http://www.apache.org/licenses/exports/'>here</a>.
 
   <section name='Apache James Server'>
 
-    <subsection name="Apache James 3.0.0 is the stable version">
+    <subsection name="Apache James 3.0.1 is the stable version">
 
       <div class="ui-widget">
         <div class="ui-priority-secondary ui-corner-all apache-james-crypto-notice">
@@ -160,11 +160,11 @@ is found <a href='http://www.apache.org/licenses/exports/'>here</a>.
       </div>
 
       <ul>
-        <li>Source code <a href="https://github.com/apache/james-project/releases/tag/james-project-3.0.0">on
GitHub</a></li>
+        <li>Source code <a href="https://github.com/apache/james-project/releases/tag/james-project-3.0.1">on
GitHub</a></li>
 
         <li>Binary (ZIP Format): <a
-                href="http://www.apache.org/dist/james/server/3.0.0/james-server-app-3.0.0-app.zip">apache-james-3.0.0-app.zip</a>
[<a
-                href="http://www.apache.org/dist/james/server/3.0.0/james-server-app-3.0.0-app.zip.md5.sig">PGP</a>]</li>
+                href="http://www.apache.org/dist/james/server/james-server-app-3.0.1-app.zip">apache-james-3.0.1-app.zip</a>
[<a
+                href="http://www.apache.org/dist/james/server/james-server-app-3.0.1-app.zip.md5.sig">PGP</a>]</li>
 
       </ul>
 

http://git-wip-us.apache.org/repos/asf/james-project/blob/05b31213/src/site/xdoc/server/release-notes.xml
----------------------------------------------------------------------
diff --git a/src/site/xdoc/server/release-notes.xml b/src/site/xdoc/server/release-notes.xml
index 26169b6..423a265 100644
--- a/src/site/xdoc/server/release-notes.xml
+++ b/src/site/xdoc/server/release-notes.xml
@@ -35,6 +35,24 @@
             </div>
         </div>
 
+        <section name="Version 3.0.1">
+
+            <p>Released October 2017</p>
+
+            <p>The Apache James PMCs are glad to announce you the release
+                version 3.0.1 of Apache James server.</p>
+
+            <p>It fixes vulnerability described in CVE-2017-12628. The JMX server,
also
+                used by the command line client is exposed to a java de-serialization
+                issue, and thus can be used to execute arbitrary commands. As James
+                exposes JMX socket by default only on local-host, this vulnerability can
+                only be used for privilege escalation.</p>
+
+            <p>If you're interested in contributing to the James project, please subscribe
to the James
+                <a href="http://james.apache.org/mail.html">mailing lists</a>.</p>
+
+        </section>
+
         <section name="Version 3.0.0">
 
             <p>Released July 2017</p>


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Mime
View raw message