ottoka opened a new pull request, #1478: URL: https://github.com/apache/james-project/pull/1478
This is a quick cherry pick of the remaining JAMES-3881 commits to the 3.7.x branch. Some of them were already in place: JAMES-3881 -Djmx.remote.x.mlet.allow.getMBeansFromURL=false (#1460) JAMES-3881 Prevent CommonsBeanutils1 deserialization exploit [BACKPORT] (#1455) JAMES-3881 Unregister LOG4J MBeans (#1459) DISCLAIMER: I was not involved in the original work. Someone more knowledgeable with JMX please review it. I did a quick test on distributed-pop3-app: James creates the jmxremote files, and the CLI requires authentication. Given authentication it works. Apart from this I cannot really tell if there is anything missing. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
