[GitHub] [james-project] chibenwa opened a new pull request #818: [SITE] Fill the security page following recent CVE announces

[GitBox <gi...@apache.org>]

chibenwa opened a new pull request #818:
URL: https://github.com/apache/james-project/pull/818


    - Adds a Reporting vulnerabilities section
    - CVE-2021-38542: Apache James vulnerable to STARTTLS command injection (IMAP and POP3)
    - CVE-2021-40110: Apache James IMAP vulnerable to a ReDoS
    - CVE-2021-40111: Apache James IMAP parsing Denial Of Service
    - CVE-2021-40525: Apache James: Sieve file storage
     vulnerable to path traversal attacks
    - Add details for CVE-2017-12628


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org

[GitHub] [james-project] chibenwa merged pull request #818: [SITE] Fill the security page following recent CVE announces

[GitBox <gi...@apache.org>]

chibenwa merged pull request #818:
URL: https://github.com/apache/james-project/pull/818


   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org



---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org