[SECURITY][UPDATE] CVE-2016-8745 Apache Tomcat Information Disclosure

2017-01-05 Thread Mark Thomas
CVE-2016-8745 Apache Tomcat Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.0.M13 Apache Tomcat 8.5.0 to 8.5.8 Apache Tomcat 8.0.0.RC1 to 8.0.39 (new) Apache Tomcat 7.0.0 to 7.0.73 (new) Apache Tomcat 6.0.16 to

[ANN] Apache log4net 2.0.7 Released

2017-01-05 Thread Stefan Bodewig
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The Apache log4net team is pleased to announce the release of Apache log4net 2.0.7. The release is available for download at https://logging.apache.org/log4net/download_log4net.cgi as well as via nuget

[ANN] Apache DeviceMap retired

2017-01-05 Thread Henri Yandell
Announcing that the Apache DeviceMap project has been retired to the Attic due to inactivity. DeviceMap was a project to create a data repository containing device information, images and other relevant information for all sorts of mobile devices. Retiring a project is not as simple as turning