[ANNOUNCE] Apache James 3.6.2 released

2022-02-07 Thread Benoit TELLIER
The Apache James (https://james.apache.org) community is pleased to announce the availability of Apache James 3.6.2. Apache James is a modular email server written in Java. This release focuses mostly on security fixes. We recommend 3.6.x user to upgrade to it. The release is available now from

CVE-2022-22931: Path traversal in Apache James

2022-02-07 Thread Benoit Tellier
Severity: moderate Description: Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include: - maildir mailbox store - Sieve file repository This enables a user to access other users data stores (limited to user names being prefixed by

[ANNOUNCE] Apache Tika 2.3.0 released

2022-02-07 Thread Tim Allison
The Apache Tika project is pleased to announce the release of Apache Tika 2.3.0. The release contents have been pushed out to the main Apache release site and to the Maven Central sync. Apache Tika is a toolkit for detecting and extracting metadata and structured text content from various document

[ANNOUNCE] Ignite Summit 2022: The Call for Papers is Open!

2022-02-07 Thread Maxim Muzafarov
The Apache Ignite PMC is pleased to announce the Call for Papers for Ignite Summit 2022. Proposals are due by April 29, 2022. Hosted by GridGain Systems with the Apache Software Foundation as a Community Partner, Ignite Summit is a one-day, online, free event—scheduled for June 14, 2022. We are n