You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@directory.apache.org by gi...@apache.org on 2021/12/13 19:38:59 UTC
[directory-site] branch asf-site updated: Updated site from master (c6efc8b83b1cd1ece50b901498514a6f71dd47e3)
This is an automated email from the ASF dual-hosted git repository.
git-site-role pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/directory-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new eac7429 Updated site from master (c6efc8b83b1cd1ece50b901498514a6f71dd47e3)
eac7429 is described below
commit eac74292438ff5ca33173e2f446969cd3261e608
Author: jenkins <bu...@apache.org>
AuthorDate: Mon Dec 13 19:38:56 2021 +0000
Updated site from master (c6efc8b83b1cd1ece50b901498514a6f71dd47e3)
---
content/fortress/index.html | 18 +++++++++++-------
content/fortress/index.xml | 7 ++++---
content/fortress/news.html | 18 +++++++++++-------
content/index.xml | 7 ++++---
content/sitemap.xml | 4 ++--
5 files changed, 32 insertions(+), 22 deletions(-)
diff --git a/content/fortress/index.html b/content/fortress/index.html
index 4aa9afc..ce46915 100644
--- a/content/fortress/index.html
+++ b/content/fortress/index.html
@@ -150,16 +150,20 @@
<h1 id="fortress-news">Fortress News</h1>
<h2 class="news">Apache Fortress 2.0.7 Released <em>posted on Dec 12th, 2021</em></h2>
<p>The Apache Directory Project announces the release of Fortress - 2.0.7.</p>
-<p>This emergency release includes an upgrade to the latest Log4j-core library. This is our response to <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228">CVE-2021-44228</a>.</p>
-<p>It also includes other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date per the latest OWASP vulnerability scans and a couple of other misc bug fixes.</p>
+<p>Included in 2.0.7:</p>
+<ul>
+<li>Upgrades to the latest Log4j-core library 2.15.0. This is our response to <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228">CVE-2021-44228</a>.</li>
+<li>Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE’s associated with those libraries.</li>
+<li>A couple of misc bug fixes to the Core.</li>
+</ul>
<p>More info about the Log4Shell vulnerability and Apache Fortress:</p>
<ul>
-<li>If using the Apache Fortress Core 2.0.6, no need to upgrade. It does pull in the Apache Log4j-core lib, but only as a test dependency.</li>
-<li>Dependent apps of the Apache Fortress Core 2.0.6 do not need to upgrade because it does not pull in the Log4j-core lib as a compile or runtime dependency.</li>
-<li>Apache Fortress 2.0.6 Web (Commander) and Rest (Enmasse) deployments are affected. Upgrade immediately, or follow the mitigation procedures as described by the Apache Log4J project.</li>
-<li>Previous versions of Apache Fortress, before 2.0.6, did not use Apache Log4j and aren’t affected.</li>
-<li>Contact us on our mailing list if you have any questions.</li>
+<li>If using the Apache Fortress Core 2.0.6, no need to upgrade. It uses the Apache Log4j-core lib, but only as a test dependency.</li>
+<li>Dependent apps of the Apache Fortress Core 2.0.6 don’t need to upgrade. It doesn’t pull in the Log4j-core lib, either as a compile or runtime dependency.</li>
+<li>Apache Fortress 2.0.6 Web (Commander) and Rest (Enmasse) deployments are affected. Upgrade immediately, or follow the mitigation procedures as described by the Apache Log4J project.</li>
+<li>Previous versions of Apache Fortress, before 2.0.6, did not use Apache Log4j and aren’t affected.</li>
</ul>
+<p>Contact us on our mailing list if you have any questions.</p>
<p>The Release notes:</p>
<ul>
<li><a href="https://issues.apache.org/jira/projects/FC/versions/12350941">Fortress 2.0.7 Release Notes</a></li>
diff --git a/content/fortress/index.xml b/content/fortress/index.xml
index 75882b5..4d7c034 100644
--- a/content/fortress/index.xml
+++ b/content/fortress/index.xml
@@ -300,8 +300,8 @@ Issues, bugs, and feature requests should be submitted to the following issue tr
<guid>https://directory.apache.org/fortress/news.html</guid>
<description>Fortress News Apache Fortress 2.0.7 Released posted on Dec 12th, 2021 The Apache Directory Project announces the release of Fortress - 2.0.7.
-This emergency release includes an upgrade to the latest Log4j-core library. This is our response to CVE-2021-44228.
-It also includes other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date per the latest OWASP vulnerability scans and a couple of other misc bug fixes.</description>
+Included in 2.0.7:
+ Upgrades to the latest Log4j-core library 2.15.0. This is our response to CVE-2021-44228. Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE&rsquo;s associated with those libraries. A couple of misc bug fixes to the Core.</description>
</item>
<item>
@@ -842,7 +842,8 @@ Table of contents 1 - An Introduction to Role-Based Access Control ANSI INCITS
<guid>https://directory.apache.org/fortress/</guid>
<description>Apache Fortress&trade; Authorization SDK and Web Components A standards-based authorization platform, written in Java, supports ANSI INCITS 359 RBAC and more. Download Apache
Fortress 2.0.7 Fortress News Apache Fortress 2.0.7 Released posted on Dec 12th, 2021 The Apache Directory Project announces the release of Fortress - 2.0.7.
-This emergency release includes an upgrade to the latest Log4j-core library. This is our response to CVE-2021-44228.</description>
+Included in 2.0.7:
+ Upgrades to the latest Log4j-core library 2.15.0. This is our response to CVE-2021-44228. Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE&rsquo;s associated with those libraries.</description>
</item>
</channel>
diff --git a/content/fortress/news.html b/content/fortress/news.html
index f6ded7f..7a1f4a3 100644
--- a/content/fortress/news.html
+++ b/content/fortress/news.html
@@ -132,16 +132,20 @@
<h1 id="fortress-news">Fortress News</h1>
<h2 class="news">Apache Fortress 2.0.7 Released <em>posted on Dec 12th, 2021</em></h2>
<p>The Apache Directory Project announces the release of Fortress - 2.0.7.</p>
-<p>This emergency release includes an upgrade to the latest Log4j-core library. This is our response to <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228">CVE-2021-44228</a>.</p>
-<p>It also includes other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date per the latest OWASP vulnerability scans and a couple of other misc bug fixes.</p>
+<p>Included in 2.0.7:</p>
+<ul>
+<li>Upgrades to the latest Log4j-core library 2.15.0. This is our response to <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=2021-44228">CVE-2021-44228</a>.</li>
+<li>Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE’s associated with those libraries.</li>
+<li>A couple of misc bug fixes to the Core.</li>
+</ul>
<p>More info about the Log4Shell vulnerability and Apache Fortress:</p>
<ul>
-<li>If using the Apache Fortress Core 2.0.6, no need to upgrade. It does pull in the Apache Log4j-core lib, but only as a test dependency.</li>
-<li>Dependent apps of the Apache Fortress Core 2.0.6 do not need to upgrade because it does not pull in the Log4j-core lib as a compile or runtime dependency.</li>
-<li>Apache Fortress 2.0.6 Web (Commander) and Rest (Enmasse) deployments are affected. Upgrade immediately, or follow the mitigation procedures as described by the Apache Log4J project.</li>
-<li>Previous versions of Apache Fortress, before 2.0.6, did not use Apache Log4j and aren’t affected.</li>
-<li>Contact us on our mailing list if you have any questions.</li>
+<li>If using the Apache Fortress Core 2.0.6, no need to upgrade. It uses the Apache Log4j-core lib, but only as a test dependency.</li>
+<li>Dependent apps of the Apache Fortress Core 2.0.6 don’t need to upgrade. It doesn’t pull in the Log4j-core lib, either as a compile or runtime dependency.</li>
+<li>Apache Fortress 2.0.6 Web (Commander) and Rest (Enmasse) deployments are affected. Upgrade immediately, or follow the mitigation procedures as described by the Apache Log4J project.</li>
+<li>Previous versions of Apache Fortress, before 2.0.6, did not use Apache Log4j and aren’t affected.</li>
</ul>
+<p>Contact us on our mailing list if you have any questions.</p>
<p>The Release notes:</p>
<ul>
<li><a href="https://issues.apache.org/jira/projects/FC/versions/12350941">Fortress 2.0.7 Release Notes</a></li>
diff --git a/content/index.xml b/content/index.xml
index 6b96014..075d1a2 100644
--- a/content/index.xml
+++ b/content/index.xml
@@ -3898,8 +3898,8 @@ This is a schema aware API, with some convenient ways to access a LDAP server.</
<guid>https://directory.apache.org/fortress/news.html</guid>
<description>Fortress News Apache Fortress 2.0.7 Released posted on Dec 12th, 2021 The Apache Directory Project announces the release of Fortress - 2.0.7.
-This emergency release includes an upgrade to the latest Log4j-core library. This is our response to CVE-2021-44228.
-It also includes other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date per the latest OWASP vulnerability scans and a couple of other misc bug fixes.</description>
+Included in 2.0.7:
+ Upgrades to the latest Log4j-core library 2.15.0. This is our response to CVE-2021-44228. Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE&rsquo;s associated with those libraries. A couple of misc bug fixes to the Core.</description>
</item>
<item>
@@ -4744,7 +4744,8 @@ News </description>
<guid>https://directory.apache.org/fortress/</guid>
<description>Apache Fortress&trade; Authorization SDK and Web Components A standards-based authorization platform, written in Java, supports ANSI INCITS 359 RBAC and more. Download Apache
Fortress 2.0.7 Fortress News Apache Fortress 2.0.7 Released posted on Dec 12th, 2021 The Apache Directory Project announces the release of Fortress - 2.0.7.
-This emergency release includes an upgrade to the latest Log4j-core library. This is our response to CVE-2021-44228.</description>
+Included in 2.0.7:
+ Upgrades to the latest Log4j-core library 2.15.0. This is our response to CVE-2021-44228. Other dependency upgrades (to latest Spring Security, Apache CXF and Apache Wicket) for Web and Rest dependencies to be up-to-date and clears up a few other CVE&rsquo;s associated with those libraries.</description>
</item>
<item>
diff --git a/content/sitemap.xml b/content/sitemap.xml
index c9127bb..4d45dfe 100644
--- a/content/sitemap.xml
+++ b/content/sitemap.xml
@@ -1789,7 +1789,7 @@
<url>
<loc>https://directory.apache.org/fortress.html</loc>
- <lastmod>2021-12-13T13:03:06-06:00</lastmod>
+ <lastmod>2021-12-13T13:36:55-06:00</lastmod>
</url>
<url>
@@ -1939,7 +1939,7 @@
<url>
<loc>https://directory.apache.org/fortress/news.html</loc>
- <lastmod>2021-12-13T13:03:06-06:00</lastmod>
+ <lastmod>2021-12-13T13:36:55-06:00</lastmod>
</url>
<url>