svn commit: r1911268 - /jackrabbit/site/live/jcr/index.html

[re...@apache.org]

Author: reschke
Date: Tue Jul 25 13:34:38 2023
New Revision: 1911268

URL: http://svn.apache.org/viewvc?rev=1911268&view=rev
Log:
@trivial: Site checkin for project Apache Jackrabbit Site-1.0-SNAPSHOT

Modified:
    jackrabbit/site/live/jcr/index.html

Modified: jackrabbit/site/live/jcr/index.html
URL: http://svn.apache.org/viewvc/jackrabbit/site/live/jcr/index.html?rev=1911268&r1=1911267&r2=1911268&view=diff
==============================================================================
--- jackrabbit/site/live/jcr/index.html (original)
+++ jackrabbit/site/live/jcr/index.html Tue Jul 25 13:34:38 2023
@@ -2,7 +2,7 @@
 
 
 <!--
- | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src\site\markdown/index.md at 2023-07-24
+ | Generated by Apache Maven Doxia Site Renderer 1.11.1 from src\site\markdown/index.md at 2023-07-25
  | Rendered using Apache Maven Fluido Skin 1.11.1
 -->
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en">
@@ -112,7 +112,7 @@
 
         <div id="breadcrumbs">
           <ul class="breadcrumb">
-        <li id="publishDate">Last Published: 2023-07-24</li>
+        <li id="publishDate">Last Published: 2023-07-25</li>
           </ul>
         </div>
       </header>
@@ -196,6 +196,13 @@ other demanding content applications. Se
 more information.</p>
 <p>Apache Jackrabbit is a project of the <a class="externalLink" href="http://www.apache.org/">Apache Software Foundation</a></p><section>
 <h2><a name="Apache_Jackrabbit_News"></a>Apache Jackrabbit News</h2><section><section>
+<h4><a name="July_25th.2C_2023:_CVE-2023-37895:_Apache_Jackrabbit_RMI_access_can_lead_to_RCE"></a>July 25th, 2023: CVE-2023-37895: Apache Jackrabbit RMI access can lead to RCE</h4>
+<p>Users of Jackrabbit standalone(-components) and webapp, please update to the recent releases (2.20.11 (stable)
+or 2.21.18 (unstable))
+immediately! These components are vulnerable for Remote Execution attacks if RMI is enabled!</p>
+<p>See <a class="externalLink" href="https://lists.apache.org/thread/j03b3qdhborc2jrhdc4d765d3jkh8bfw">https://lists.apache.org/thread/j03b3qdhborc2jrhdc4d765d3jkh8bfw</a> and
+<a class="externalLink" href="https://issues.apache.org/jira/browse/JCR-4949">https://issues.apache.org/jira/browse/JCR-4949</a> for more details. And thanks
+to Eluen Siebene for the report.</p></section><section>
 <h4><a name="July_24th.2C_2023:_Apache_Jackrabbit_Oak_1.54.0_released"></a>July 24th, 2023: Apache Jackrabbit Oak 1.54.0 released</h4>
 <p>Apache Jackrabbit Oak 1.54.0 is an incremental feature release based
 on and compatible with earlier stable Jackrabbit Oak 1.x releases.