oscerd opened a new pull request, #1820: URL: https://github.com/apache/camel-website/pull/1820
Adds a short post announcing the 38 security advisories published on 15 October in #1818, all fixed in 4.18.5, 4.22.1 and 4.23.0. The post is a plain announcement: what was published, an upgrade table with the 4.14.x end-of-life note, a pointer to the changed defaults in the 4.23 upgrade guide, the list of all 38 with component, severity and a one-line description, and the credits. Twenty-eight of the findings come from Claude as part of the Glasswing initiative at the ASF, and the other ten from six researchers, who are named with the CVEs they reported. ### Data provenance Every number is derived from the advisories now on `main` and was checked before committing: | Claim | Source | | --- | --- | | 38 advisories, all fixed in 4.18.5, 4.22.1 and 4.23.0 | the 38 advisories added in #1818, `fixed:` field | | 13 HIGH, 25 MEDIUM | `severity:` of those 38 | | 28 from Glasswing, 10 from researchers | `credit:`, Claude Security Scan Tool against named reporters | | 35 of the 38 affect 4.14.x | `affected:` ranges starting at or below 4.14; the other three start at 4.15.0 or 4.18.0 | | 4.14.x reached end of life after 4.14.9 | `content/releases/release-4.14.9.md`, and the end-of-life notes in the advisories | All 42 internal links in the post resolve to pages on `main`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
