Arsnael commented on code in PR #1493:
URL: https://github.com/apache/james-project/pull/1493#discussion_r1141735671
##########
src/site/xdoc/server/release-notes.xml:
##########
@@ -39,6 +39,10 @@
of a <a
href="https://github.com/apache/james-project/blob/master/CHANGELOG.md">changelog
file</a>
as well as details <a
href="https://github.com/apache/james-project/blob/master/upgrade-instructions.md">upgrade
instructions</a>.</p>
</section>
+ <section name="Version 3.7.4">
+ <p>Released December 2022</p>
Review Comment:
Really? How about march 2023? :)
##########
CHANGELOG.md:
##########
@@ -231,6 +231,31 @@ Multiple performance enhancements for Distributed server
mailbox, IMAP, SMTP and
- JAMES-3793 Prevent needless defensive copies within S3BlobStoreDAO (#1147)
- JAMES-3793 Prevent Bytes concat upon reading FULL messages (#1152)
+## [3.7.4] - 2023-03-20
+
+### Security
+
+ - JAMES-3881 WARN if no JMX authentication is setup
+ - JAMES-3881 Enable JMX password generation by default (guice)
+ - JAMES-3881 Set a JMX password
+ - JAMES-3881 -Djmx.remote.x.mlet.allow.getMBeansFromURL=false (#1460)
+ - [UPGRADE] commons-fileupload 1.4 -> 1.5 (#1462)
+ - JAMES-3881 Prevent CommonsBeanutils1 deserialization exploit [BACKPORT]
(#1455)
+22313d557d JAMES-3881 Unregister LOG4J MBeans (#1459)
Review Comment:
```suggestion
- JAMES-3881 Unregister LOG4J MBeans (#1459)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]