[ANNOUNCE] Apache Traffic Server 9.2.1 and 8.1.7 are Released

2023-06-12 Thread Bryan Call
Apache Traffic Server 9.2.1 and 8.1.7 are Released The Apache Software Foundation and the Apache Traffic Server (ATS) Project are pleased to announce the release of Apache Traffic Server 9.2.1 and 8.1.7! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by

CVE-2023-34468: Apache NiFi: Potential Code Injection with Database Services using H2

2023-06-12 Thread David Handermann
Severity: important Affected versions: - Apache NiFi 0.0.2 through 1.21.0 Description: The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to configure a Database URL with the H2 driver that

CVE-2023-34212: Apache NiFi: Potential Deserialization of Untrusted Data with JNDI in JMS Components

2023-06-12 Thread David Handermann
Severity: important Affected versions: - Apache NiFi 1.8.0 through 1.21.0 Description: The JndiJmsConnectionFactoryProvider Controller Service, along with the ConsumeJMS and PublishJMS Processors, in Apache NiFi 1.8.0 through 1.21.0 allow an authenticated and authorized user to configure URL

[ANNOUNCE] MyFaces Core v4.0.1 Release

2023-06-12 Thread Volodymyr Siedlecki
The Apache MyFaces team is delighted to announce the release of MyFaces Core 4.0.1. It was released a few weeks ago, but this announcement was delayed. I apologize. MyFaces Core is a Jakarta Faces implementation specified by Jakarta Faces 4.0 Specification (1). The Faces specification is for

[ANNOUNCE] Apache NiFi 1.22.0 release.

2023-06-12 Thread Joe Witt
Hello The Apache NiFi team would like to announce the release of Apache NiFi 1.22.0. Apache NiFi is an easy to use, powerful, and reliable system to process and distribute data. Apache NiFi was made for dataflow. It supports highly configurable directed graphs of data routing, transformation,