Re: [ANNOUNCE] Apache CloudStack Security Releases 4.8.1.1, 4.9.0.1

2016-10-27 Thread Rohit Yadav
All, Since this CVE was a severe issue and there are several CloudStack 4.5.x users who may still want a patch, I've went ahead and cherry-picked Marc's CVE fix on top of last release 4.5.2.1 to create a community-backed 4.5.2.2 tag [1] that can be used by anyone to build packages. This was not

[ANNOUNCE] Apache CloudStack Security Releases 4.8.1.1, 4.9.0.1

2016-10-26 Thread Rohit Yadav
# Apache CloudStack Security Releases 4.8.1.1, 4.9.0.1 The Apache CloudStack project announces security releases 4.8.1.1, 4.9.0.1 that fixes the bug causing vulnerability over previously released minor versions 4.8.1 and 4.9.0 respectively. As a security release, no new features are included but