You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@james.apache.org by "Arsnael (via GitHub)" <gi...@apache.org> on 2023/03/20 07:52:24 UTC
[GitHub] [james-project] Arsnael commented on a diff in pull request #1493: Release materials for Apache James 3.7.4
Arsnael commented on code in PR #1493:
URL: https://github.com/apache/james-project/pull/1493#discussion_r1141735671
##########
src/site/xdoc/server/release-notes.xml:
##########
@@ -39,6 +39,10 @@
of a <a href="https://github.com/apache/james-project/blob/master/CHANGELOG.md">changelog file</a>
as well as details <a href="https://github.com/apache/james-project/blob/master/upgrade-instructions.md">upgrade instructions</a>.</p>
</section>
+ <section name="Version 3.7.4">
+ <p>Released December 2022</p>
Review Comment:
Really? How about march 2023? :)
##########
CHANGELOG.md:
##########
@@ -231,6 +231,31 @@ Multiple performance enhancements for Distributed server mailbox, IMAP, SMTP and
- JAMES-3793 Prevent needless defensive copies within S3BlobStoreDAO (#1147)
- JAMES-3793 Prevent Bytes concat upon reading FULL messages (#1152)
+## [3.7.4] - 2023-03-20
+
+### Security
+
+ - JAMES-3881 WARN if no JMX authentication is setup
+ - JAMES-3881 Enable JMX password generation by default (guice)
+ - JAMES-3881 Set a JMX password
+ - JAMES-3881 -Djmx.remote.x.mlet.allow.getMBeansFromURL=false (#1460)
+ - [UPGRADE] commons-fileupload 1.4 -> 1.5 (#1462)
+ - JAMES-3881 Prevent CommonsBeanutils1 deserialization exploit [BACKPORT] (#1455)
+22313d557d JAMES-3881 Unregister LOG4J MBeans (#1459)
Review Comment:
```suggestion
- JAMES-3881 Unregister LOG4J MBeans (#1459)
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@james.apache.org
For additional commands, e-mail: notifications-help@james.apache.org