[ANNOUNCE] Apache POI 3.15-beta2 released

2016-07-02 Thread Andreas Beeker
This release comes in two forms: - pre-built binaries containing compiled versions of all Apache POI components and documentation (poi-bin-3.15-beta2-20160702.zip or poi-bin-3.15-beta2-20160702.tar.gz) - source archive you can build POI from (poi-src-3.15-beta2-20160702.zip or

[SECURITY] CVE-2016-4974: Apache Qpid: deserialization of untrusted input while using JMS ObjectMessage

2016-07-02 Thread Robbie Gemmell
[CVE-2016-4974] Apache Qpid: deserialization of untrusted input while using JMS ObjectMessage Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Qpid AMQP 0-x JMS client 6.0.3 and earlier Qpid JMS (AMQP 1.0) client 0.9.0 and earlier Description: When applications call

[ANNOUNCE] Apache Qpid JMS 0.10.0 released

2016-07-02 Thread Robbie Gemmell
The Apache Qpid community is pleased to announce the immediate availability of Apache Qpid JMS 0.10.0. This is the tenth release of our newer AMQP 1.0 JMS client, based around the Qpid Proton protocol engine and implementing the AMQP JMS Mapping as it evolves at OASIS. This release addresses vuln