Sure, I'll be happy to. But what is a 'CVE case'? ;) Also, I didn't want to make a public announcement until the artifacts have been reflected by the mirrors. Almost 13 hours later, I still don't see them. But I already see the binary artifacts in Maven Central...
I know it might take mirrors up to 24 hours to reflect the changes, but it is a bit odd to me that even the http://www.apache.org/dist/shiro/KEYS file is not being served. It has been on the people.a.o filesystem since last night - I would have thought that it would have been sync'd by now since shiro site changes are certainly sync'd within an hour or two. Cheers, Les
