You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@allura.apache.org by ke...@apache.org on 2018/03/15 18:46:22 UTC

allura-site git commit: Allura 1.8.0 release

Repository: allura-site
Updated Branches:
  refs/heads/asf-site 96a75964c -> 79d7aa476


Allura 1.8.0 release


Project: http://git-wip-us.apache.org/repos/asf/allura-site/repo
Commit: http://git-wip-us.apache.org/repos/asf/allura-site/commit/79d7aa47
Tree: http://git-wip-us.apache.org/repos/asf/allura-site/tree/79d7aa47
Diff: http://git-wip-us.apache.org/repos/asf/allura-site/diff/79d7aa47

Branch: refs/heads/asf-site
Commit: 79d7aa47654604fef8687afa1685779588424573
Parents: 96a7596
Author: Kenton Taylor <kt...@slashdotmedia.com>
Authored: Thu Mar 15 14:46:14 2018 -0400
Committer: Kenton Taylor <kt...@slashdotmedia.com>
Committed: Thu Mar 15 14:46:14 2018 -0400

----------------------------------------------------------------------
 _src/allura-theme/templates/index.html |   2 +-
 _src/content/2018-allura-1.8.1.md      |  34 ++++++++
 _src/pelicanconf.py                    |   6 +-
 feeds/all.atom.xml                     |  18 +++-
 feeds/tag.release.atom.xml             |  18 +++-
 index.html                             |  12 +--
 news.html                              |  11 +++
 posts/2018-allura-1.8.1.html           | 123 ++++++++++++++++++++++++++++
 tag/release.html                       |  11 +++
 9 files changed, 223 insertions(+), 12 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/_src/allura-theme/templates/index.html
----------------------------------------------------------------------
diff --git a/_src/allura-theme/templates/index.html b/_src/allura-theme/templates/index.html
index 3823938..2404a23 100644
--- a/_src/allura-theme/templates/index.html
+++ b/_src/allura-theme/templates/index.html
@@ -49,7 +49,7 @@
           <span class="text-white">{{ RELEASE_DATE }} &mdash;</span>
           <a href="{{ RELEASE_NEWS }}">What's New</a>
           <ul>
-            <li class="text-white"><a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.md5" class="text-white" download="">md5</a>, <a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.sha1" class="text-white" download="">sha1</a>, <a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.sha512" class="text-white" download="">sha512 sums</a></li>
+            <li class="text-white"><a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.sha1" class="text-white" download="">sha1</a>, <a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.sha512" class="text-white" download="">sha512 sums</a></li>
             <li class="text-white">PGP <a href="{{ DIST_URL }}allura-{{ RELEASE_VERSION }}.tar.gz.asc" class="text-white" download="">signature</a> &amp; <a href="{{ DIST_URL }}KEYS" class="text-white" download="">keys</a></li>
           </ul>
         </div>

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/_src/content/2018-allura-1.8.1.md
----------------------------------------------------------------------
diff --git a/_src/content/2018-allura-1.8.1.md b/_src/content/2018-allura-1.8.1.md
new file mode 100644
index 0000000..449bc10
--- /dev/null
+++ b/_src/content/2018-allura-1.8.1.md
@@ -0,0 +1,34 @@
+Title: Apache Allura 1.8.1 released
+Date: 2018-03-14
+Tags: release
+Slug: allura-1.8.1
+Summary: Version 1.8.1 of Allura released, with many fixes & improvements and a critical security fix.
+
+#### New Features
+
+Apache Allura 1.8.1 has been released.
+It contains a several improvements around spam prevention and content quality on discussions.  It also includes a few performance optimizations, along with a number of fixes and smaller improvements.  To see all the details, check out the [release changelog](https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES).
+
+#### Important Security Fix
+
+
+CVE-2018-1319 Apache Allura HTTP response splitting
+
+Severity: Important<br>
+Versions Affected: All
+
+**Description:**<br>
+Attackers may craft URLs that cause HTTP response splitting.  If a victim goes
+to a maliciously crafted URL, unwanted results may occur including XSS or
+service denial for the victim's browsing session.
+
+**Mitigation:**<br>
+Users of Allura should upgrade to Allura 1.8.1 immediately.
+
+**Credit:**<br>
+This issue was discovered by Everardo Padilla Saca
+
+
+#### Get 1.8.1
+
+[Download Allura](http://www.apache.org/dyn/closer.cgi/allura/) and [install it](https://forge-allura.apache.org/docs/getting_started/installation.html) today.

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/_src/pelicanconf.py
----------------------------------------------------------------------
diff --git a/_src/pelicanconf.py b/_src/pelicanconf.py
index cea35fa..89059ed 100644
--- a/_src/pelicanconf.py
+++ b/_src/pelicanconf.py
@@ -44,9 +44,9 @@ TAG_FEED_ATOM = 'feeds/tag.%s.atom.xml'
 
 CURRENT_YEAR = dt.date.today().year
 
-RELEASE_VERSION = '1.8.0'
-RELEASE_DATE = 'Feb 2018'
-RELEASE_NEWS = 'posts/2018-allura-1.8.0.html'
+RELEASE_VERSION = '1.8.1'
+RELEASE_DATE = 'Mar 2018'
+RELEASE_NEWS = 'posts/2018-allura-1.8.1.html'
 DIST_URL = 'http://apache.org/dist/allura/'
 
 FORGE_ALLURA_URL = 'https://forge-allura.apache.org/'

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/feeds/all.atom.xml
----------------------------------------------------------------------
diff --git a/feeds/all.atom.xml b/feeds/all.atom.xml
index 682de40..a8f7dd5 100644
--- a/feeds/all.atom.xml
+++ b/feeds/all.atom.xml
@@ -1,5 +1,21 @@
 <?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura</title><link href="//allura.apache.org/" rel="alternate"></link><link href="//allura.apache.org/feeds/all.atom.xml" rel="self"></link><id>//allura.apache.org/</id><updated>2018-02-06T00:00:00+00:00</updated><entry><title>Apache Allura 1.8.0 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.0.html" rel="alternate"></link><published>2018-02-06T00:00:00+00:00</published><updated>2018-02-06T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-02-06:/posts/2018-allura-1.8.0.html</id><summary type="html">&lt;p&gt;Version 1.8.0 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura</title><link href="//allura.apache.org/" rel="alternate"></link><link href="//allura.apache.org/feeds/all.atom.xml" rel="self"></link><id>//allura.apache.org/</id><updated>2018-03-14T00:00:00+00:00</updated><entry><title>Apache Allura 1.8.1 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.1.html" rel="alternate"></link><published>2018-03-14T00:00:00+00:00</published><updated>2018-03-14T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-03-14:/posts/2018-allura-1.8.1.html</id><summary type="html">&lt;p&gt;Version 1.8.1 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
+&lt;p&gt;Apache Allura 1.8.1 has been released.
+It contains a several improvements around spam prevention and content quality on discussions.  It also includes a few performance optimizations, along with a number of fixes and smaller improvements.  To see all the details, check out the &lt;a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES"&gt;release changelog&lt;/a&gt;.&lt;/p&gt;
+&lt;h4&gt;Important Security Fix&lt;/h4&gt;
+&lt;p&gt;CVE-2018-1319 Apache Allura HTTP response splitting&lt;/p&gt;
+&lt;p&gt;Severity: Important&lt;br&gt;
+Versions Affected: All&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Description:&lt;/strong&gt;&lt;br&gt;
+Attackers may craft URLs that cause HTTP response splitting.  If a victim goes
+to a maliciously crafted URL, unwanted results may occur including XSS or
+service denial for the victim's browsing session.&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Mitigation:&lt;/strong&gt;&lt;br&gt;
+Users of Allura should upgrade to Allura 1.8.1 immediately.&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Credit:&lt;/strong&gt;&lt;br&gt;
+This issue was discovered by Everardo Padilla Saca&lt;/p&gt;
+&lt;h4&gt;Get 1.8.1&lt;/h4&gt;
+&lt;p&gt;&lt;a href="http://www.apache.org/dyn/closer.cgi/allura/"&gt;Download Allura&lt;/a&gt; and &lt;a href="https://forge-allura.apache.org/docs/getting_started/installation.html"&gt;install it&lt;/a&gt; today.&lt;/p&gt;</content><category term="release"></category></entry><entry><title>Apache Allura 1.8.0 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.0.html" rel="alternate"></link><published>2018-02-06T00:00:00+00:00</published><updated>2018-02-06T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-02-06:/posts/2018-allura-1.8.0.html</id><summary type="html">&lt;p&gt;Version 1.8.0 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
 &lt;p&gt;Apache Allura 1.8.0 has been released.
 It contains a Docker setup for production environments, and improved security and auditing around user logins.
 This release also contains a large number of fixes and smaller improvements.  To see all the details, check out the &lt;a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES"&gt;release changelog&lt;/a&gt;.&lt;/p&gt;

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/feeds/tag.release.atom.xml
----------------------------------------------------------------------
diff --git a/feeds/tag.release.atom.xml b/feeds/tag.release.atom.xml
index 67266df..3d0f477 100644
--- a/feeds/tag.release.atom.xml
+++ b/feeds/tag.release.atom.xml
@@ -1,5 +1,21 @@
 <?xml version="1.0" encoding="utf-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura - release</title><link href="//allura.apache.org/" rel="alternate"></link><link href="//allura.apache.org/feeds/tag.release.atom.xml" rel="self"></link><id>//allura.apache.org/</id><updated>2018-02-06T00:00:00+00:00</updated><entry><title>Apache Allura 1.8.0 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.0.html" rel="alternate"></link><published>2018-02-06T00:00:00+00:00</published><updated>2018-02-06T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-02-06:/posts/2018-allura-1.8.0.html</id><summary type="html">&lt;p&gt;Version 1.8.0 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
+<feed xmlns="http://www.w3.org/2005/Atom"><title>Apache Allura - release</title><link href="//allura.apache.org/" rel="alternate"></link><link href="//allura.apache.org/feeds/tag.release.atom.xml" rel="self"></link><id>//allura.apache.org/</id><updated>2018-03-14T00:00:00+00:00</updated><entry><title>Apache Allura 1.8.1 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.1.html" rel="alternate"></link><published>2018-03-14T00:00:00+00:00</published><updated>2018-03-14T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-03-14:/posts/2018-allura-1.8.1.html</id><summary type="html">&lt;p&gt;Version 1.8.1 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
+&lt;p&gt;Apache Allura 1.8.1 has been released.
+It contains a several improvements around spam prevention and content quality on discussions.  It also includes a few performance optimizations, along with a number of fixes and smaller improvements.  To see all the details, check out the &lt;a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES"&gt;release changelog&lt;/a&gt;.&lt;/p&gt;
+&lt;h4&gt;Important Security Fix&lt;/h4&gt;
+&lt;p&gt;CVE-2018-1319 Apache Allura HTTP response splitting&lt;/p&gt;
+&lt;p&gt;Severity: Important&lt;br&gt;
+Versions Affected: All&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Description:&lt;/strong&gt;&lt;br&gt;
+Attackers may craft URLs that cause HTTP response splitting.  If a victim goes
+to a maliciously crafted URL, unwanted results may occur including XSS or
+service denial for the victim's browsing session.&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Mitigation:&lt;/strong&gt;&lt;br&gt;
+Users of Allura should upgrade to Allura 1.8.1 immediately.&lt;/p&gt;
+&lt;p&gt;&lt;strong&gt;Credit:&lt;/strong&gt;&lt;br&gt;
+This issue was discovered by Everardo Padilla Saca&lt;/p&gt;
+&lt;h4&gt;Get 1.8.1&lt;/h4&gt;
+&lt;p&gt;&lt;a href="http://www.apache.org/dyn/closer.cgi/allura/"&gt;Download Allura&lt;/a&gt; and &lt;a href="https://forge-allura.apache.org/docs/getting_started/installation.html"&gt;install it&lt;/a&gt; today.&lt;/p&gt;</content><category term="release"></category></entry><entry><title>Apache Allura 1.8.0 released</title><link href="//allura.apache.org/posts/2018-allura-1.8.0.html" rel="alternate"></link><published>2018-02-06T00:00:00+00:00</published><updated>2018-02-06T00:00:00+00:00</updated><author><name></name></author><id>tag:allura.apache.org,2018-02-06:/posts/2018-allura-1.8.0.html</id><summary type="html">&lt;p&gt;Version 1.8.0 of Allura released, with many fixes &amp;amp; improvements and a critical security fix.&lt;/p&gt;</summary><content type="html">&lt;h4&gt;New Features&lt;/h4&gt;
 &lt;p&gt;Apache Allura 1.8.0 has been released.
 It contains a Docker setup for production environments, and improved security and auditing around user logins.
 This release also contains a large number of fixes and smaller improvements.  To see all the details, check out the &lt;a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES"&gt;release changelog&lt;/a&gt;.&lt;/p&gt;

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/index.html
----------------------------------------------------------------------
diff --git a/index.html b/index.html
index 490417b..44c5e9f 100644
--- a/index.html
+++ b/index.html
@@ -84,22 +84,22 @@
       <h3 class="text-center">Get the Latest Version of Allura</h3>
       <div class="row pad-vert-md">
         <div id="release" class="col-12 auto-margin pad-vert-xs text-center">
-          <a href="http://www.apache.org/dyn/closer.cgi/allura/allura-1.8.0.tar.gz"><button class="auto-margin">Download v1.8.0</button></a>
-          <span class="text-white">Feb 2018 &mdash;</span>
-          <a href="posts/2018-allura-1.8.0.html">What's New</a>
+          <a href="http://www.apache.org/dyn/closer.cgi/allura/allura-1.8.1.tar.gz"><button class="auto-margin">Download v1.8.1</button></a>
+          <span class="text-white">Mar 2018 &mdash;</span>
+          <a href="posts/2018-allura-1.8.1.html">What's New</a>
           <ul>
-            <li class="text-white"><a href="http://apache.org/dist/allura/allura-1.8.0.tar.gz.md5" class="text-white" download="">md5</a>, <a href="http://apache.org/dist/allura/allura-1.8.0.tar.gz.sha1" class="text-white" download="">sha1</a>, <a href="http://apache.org/dist/allura/allura-1.8.0.tar.gz.sha512" class="text-white" download="">sha512 sums</a></li>
-            <li class="text-white">PGP <a href="http://apache.org/dist/allura/allura-1.8.0.tar.gz.asc" class="text-white" download="">signature</a> &amp; <a href="http://apache.org/dist/allura/KEYS" class="text-white" download="">keys</a></li>
+            <li class="text-white"><a href="http://apache.org/dist/allura/allura-1.8.1.tar.gz.sha1" class="text-white" download="">sha1</a>, <a href="http://apache.org/dist/allura/allura-1.8.1.tar.gz.sha512" class="text-white" download="">sha512 sums</a></li>
+            <li class="text-white">PGP <a href="http://apache.org/dist/allura/allura-1.8.1.tar.gz.asc" class="text-white" download="">signature</a> &amp; <a href="http://apache.org/dist/allura/KEYS" class="text-white" download="">keys</a></li>
           </ul>
         </div>
         <div id="news" class="col-12 auto-margin pad-vert-xs text-center">
             <h5>News</h5>
             <ul>
+                    <li><a href="//allura.apache.org/posts/2018-allura-1.8.1.html">Apache Allura 1.8.1 released</a></li>
                     <li><a href="//allura.apache.org/posts/2018-allura-1.8.0.html">Apache Allura 1.8.0 released</a></li>
                     <li><a href="//allura.apache.org/posts/2017-allura-1.7.0.html">Apache Allura 1.7.0 released</a></li>
                     <li><a href="//allura.apache.org/posts/2016-allura-1.6.0.html">Apache Allura 1.6.0 released</a></li>
                     <li><a href="//allura.apache.org/posts/2016-two-factor-auth.html">Two Factor Authentication</a></li>
-                    <li><a href="//allura.apache.org/posts/2016-allura-1.5.0.html">Apache Allura 1.5.0 released</a></li>
                 <li><a href="//allura.apache.org/news.html">All News &rarr;</a></li>
             </ul>
         </div>

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/news.html
----------------------------------------------------------------------
diff --git a/news.html b/news.html
index 10bd077..e9a1797 100644
--- a/news.html
+++ b/news.html
@@ -53,6 +53,17 @@
 
 <div class="row bg-white pad-bot-md text-center">
   <div class="row pad-top-md">
+    <h3><a class="text-black" href="//allura.apache.org/posts/2018-allura-1.8.1.html">Apache Allura 1.8.1 released</a></h3>
+  </div>
+
+  <div class="post-info">
+    Published:
+    <abbr class="published" title="2018-03-14T00:00:00+00:00">
+      Wed 14 March 2018
+    </abbr>
+  </div>
+  <div class="entry-content"> <p>Version 1.8.1 of Allura released, with many fixes &amp; improvements and a critical security fix.</p> </div>
+  <div class="row pad-top-md">
     <h3><a class="text-black" href="//allura.apache.org/posts/2018-allura-1.8.0.html">Apache Allura 1.8.0 released</a></h3>
   </div>
 

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/posts/2018-allura-1.8.1.html
----------------------------------------------------------------------
diff --git a/posts/2018-allura-1.8.1.html b/posts/2018-allura-1.8.1.html
new file mode 100644
index 0000000..e3be227
--- /dev/null
+++ b/posts/2018-allura-1.8.1.html
@@ -0,0 +1,123 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+  <title>    Apache Allura 1.8.1 released
+</title>
+  <meta charset="utf-8">
+  <meta name="description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects.">
+  <meta name="keywords" content="">
+  <meta name="author" content="">
+  <link rel="canonical" href="//allura.apache.org">
+
+  <!--    Facebook Meta Info-->
+  <meta property="og:url" content="//allura.apache.org">
+  <meta property="og:image" content="//allura.apache.org/theme/img/logo-asf-apache.png">
+  <meta property="og:description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects.">
+  <meta property="og:title" content="Apache Allura">
+  <meta property="og:site_name" content="Apache Allura">
+  <meta property="og:see_also" content="//allura.apache.org">
+
+  <!--    Twitter Meta Info-->
+  <meta name="twitter:card" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects.">
+  <meta name="twitter:url" content="//allura.apache.org">
+  <meta name="twitter:title" content="Apache Allura">
+  <meta name="twitter:description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects.">
+  <meta name="twitter:image" content="//allura.apache.org/theme/img/logo-asf-apache.png">
+
+  <!--    Google+ Meta Info-->
+  <meta itemprop="name" content="Apache Allura">
+  <meta itemprop="description" content="Allura is an open source implementation of a software forge, a site that manages source code repositories, bug reports, discussions, and more for projects.">
+  <meta itemprop="image" content="//allura.apache.org/theme/img/logo-asf-apache.png">
+
+  <link rel="stylesheet" type="text/css" href="//allura.apache.org/theme/css/flex.min.css">
+  <link rel="stylesheet" type="text/css" href="//allura.apache.org/theme/css/style.css">
+          <link rel="stylesheet" type="text/css" href="//allura.apache.org/theme/css/article.css">
+
+
+</head>
+
+<body cz-shortcut-listen="true" class="pg-">
+  <section id="content_wrapper" class="mobile-desktop row">
+    <div id="header" class="row ">
+      <header id="login_header" class="row">
+        <div class="bg-shadow pad-vert-md">
+          <span><h1 class="text-center"><a href="//allura.apache.org">Apache <img src="//allura.apache.org/theme/img/logo_white.png" width="94"> Allura<span class="tm">™</span></a></h1></span>
+          <span></span>
+          <h6 class="text-center">Open source project hosting platform</h6>
+        </div>
+      </header>
+    </div>
+
+    <div class="article-content">
+<div class="row bg-white pad-vert-lg">
+  <div class="row">
+    <h3 class="text-black text-center">Apache Allura 1.8.1 released</h3>
+  </div>
+
+  <div class="post-info text-center">
+    Published:
+    <abbr class="published" title="2018-03-14T00:00:00+00:00">
+      Wed 14 March 2018
+    </abbr>
+    <br>
+    Tagged:
+        <a href="//allura.apache.org/tag/release.html">release</a>
+  </div>
+
+  <div class="row">
+    <div class="col-20 no-float auto-margin">
+      <div class="row">
+        <div class="pad-md text-black"><h4>New Features</h4>
+<p>Apache Allura 1.8.1 has been released.
+It contains a several improvements around spam prevention and content quality on discussions.  It also includes a few performance optimizations, along with a number of fixes and smaller improvements.  To see all the details, check out the <a href="https://forge-allura.apache.org/p/allura/git/ci/master/tree/CHANGES">release changelog</a>.</p>
+<h4>Important Security Fix</h4>
+<p>CVE-2018-1319 Apache Allura HTTP response splitting</p>
+<p>Severity: Important<br>
+Versions Affected: All</p>
+<p><strong>Description:</strong><br>
+Attackers may craft URLs that cause HTTP response splitting.  If a victim goes
+to a maliciously crafted URL, unwanted results may occur including XSS or
+service denial for the victim's browsing session.</p>
+<p><strong>Mitigation:</strong><br>
+Users of Allura should upgrade to Allura 1.8.1 immediately.</p>
+<p><strong>Credit:</strong><br>
+This issue was discovered by Everardo Padilla Saca</p>
+<h4>Get 1.8.1</h4>
+<p><a href="http://www.apache.org/dyn/closer.cgi/allura/">Download Allura</a> and <a href="https://forge-allura.apache.org/docs/getting_started/installation.html">install it</a> today.</p></div>
+      </div>
+    </div>
+  </div>
+</div>
+</div>
+
+    <div class="row">
+      <footer id="footer" class="bg-black text-white col-24">
+        <p class="copy pad-top-sm text-center">Copyright © 2018 The Apache Software Foundation, Licensed under
+            <a href="http://www.apache.org/licenses/LICENSE-2.0.html">the Apache License, Version 2.0.</a></p>
+        <p class="copy pad-bot-sm text-center">Apache, Allura, Apache Allura, and the Apache feather logo are trademarks of The Apache Software Foundation.</p>
+      </footer>
+    </div>
+  </section>
+
+  <script type="application/javascript" src="//allura.apache.org/theme/js/jquery-1.11.2.min.js"></script>
+  <script type="application/javascript" src="//allura.apache.org/theme/js/frontend.js"></script>
+        <script type="application/javascript" src="//allura.apache.org/theme/js/article.js"></script>
+  <!-- Credits
+
+          Logo Design: Will Leonard
+          http://willleonard.org
+
+          Site design: Perry Merrity
+          http://perrymerrity.com/
+
+          bg-header-forge.jpg
+          Photo by: Stefan Schmitz
+          https://creativecommons.org/licenses/by-nd/2.0
+
+          bg-developers-fire.jpg
+          Photo by: Frédéric Bisson
+          https://creativecommons.org/licenses/by-nd/2.0
+      -->
+</body>
+</html>
\ No newline at end of file

http://git-wip-us.apache.org/repos/asf/allura-site/blob/79d7aa47/tag/release.html
----------------------------------------------------------------------
diff --git a/tag/release.html b/tag/release.html
index af0b3b3..4be12b8 100644
--- a/tag/release.html
+++ b/tag/release.html
@@ -53,6 +53,17 @@
 
 <div class="row bg-white pad-bot-md text-center">
   <div class="row pad-top-md">
+    <h3><a class="text-black" href="//allura.apache.org/posts/2018-allura-1.8.1.html">Apache Allura 1.8.1 released</a></h3>
+  </div>
+
+  <div class="post-info">
+    Published:
+    <abbr class="published" title="2018-03-14T00:00:00+00:00">
+      Wed 14 March 2018
+    </abbr>
+  </div>
+  <div class="entry-content"> <p>Version 1.8.1 of Allura released, with many fixes &amp; improvements and a critical security fix.</p> </div>
+  <div class="row pad-top-md">
     <h3><a class="text-black" href="//allura.apache.org/posts/2018-allura-1.8.0.html">Apache Allura 1.8.0 released</a></h3>
   </div>