[ANNOUNCE] Apache Wicket 7.16.0 released

2020-01-08 Thread Andrea Del Bene
The Apache Wicket PMC is proud to announce Apache Wicket 7.16.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find

[ANNOUNCEMENT] HttpComponents Core 5.0 beta11 (GA candidate) released

2020-01-08 Thread Oleg Kalnichevski
The Apache HttpComponents project is pleased to announce 5.0-beta11 (GA candidate) release of HttpComponents Core. This BETA improves handling of illegal or invalid requests on the server side and fixes a number of defects in HTTP/2 protocol code found since the last release. IMPORTANT: This

[ANNOUNCE] Apache Wicket 8.7.0 released

2020-01-08 Thread Andrea Del Bene
The Apache Wicket PMC is proud to announce Apache Wicket 8.7.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find

[ANNOUNCE] Apache Jackrabbit 2.20.0 released

2020-01-08 Thread Julian Reschke
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit 2.20.0. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit --

[SECURITY] CVE-2020-1925: Possible SSRF in AsyncResponseWrapperImpl

2020-01-08 Thread mibo
CVE-2020-1925: Possible SSRF in AsyncResponseWrapperImpl Severity: Important Vendor: The Apache Software Foundation Versions Affected: Olingo 4.0.0 to 4.7.0 The OData v2 versions of Olingo 2.x are not affected Description: The AsyncRequestWrapperImpl class reads a URL from the Location header,