[ANNOUNCE] Apache Geode 1.13.8

2022-03-15 Thread Dick Cavender
The Apache Geode community is pleased to announce the availability of Apache Geode 1.13.8. Geode is a data management platform that provides a database-like consistency model, reliable transaction processing and a shared-nothing architecture to maintain very low latency performance with high

[ANN] Apache ActiveMQ 5.17.0 has been released!

2022-03-15 Thread Jean-Baptiste Onofré
The ActiveMQ team is pleased to announce ActiveMQ 5.17.0 has been released. ActiveMQ 5.17.0 is a major milestone in ActiveMQ roadmap, bringing lot of changes, fixes and improvements, especially: - JDK 11+ required for build and run now - Spring 5.3.16 - Log4j 2.17.1 - Jetty 9.4.45 using atomic

[ANNOUNCE] Apache Traffic Server v9.1.2 is Released!

2022-03-15 Thread Leif Hedstrom
Apache Traffic Server v9.1.2 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server v9.1.2! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large internet

[ANNOUNCEMENT] Commons Daemon 1.3.0 Released

2022-03-15 Thread Mark Thomas
The Apache Commons Team is pleased to announce the availability of Apache Commons Daemon 1.3.0. The Apache Commons Daemon software library provides a generic Daemon (unix) or Service (Windows) wrapper for Java code. Version 1.3.0 is a mainly bugfix release but also increases the minimum Java

CVE-2022-26779: Apache Cloudstack insecure random number generation affects project email invitation

2022-03-15 Thread Daan
Severity: low Description: Apache CloudStack prior to 4.16.1.0 used insecure random number generation for project invitation tokens. If a project invite is created based only on an email address, a random token is generated. An attacker with knowledge of the project ID and the fact that the