CVE-2024-37358: Apache James: denial of service through the use of IMAP literals

2025-02-05 Thread Benoit Tellier
Affected versions: - Apache James server through 3.7.5 - Apache James server 3.8.0 through 3.8.1 Description: Similarly to CVE-2024-34055, Apache James is vulnerable to denial of service through the abuse of IMAP literals from both authenticated and unauthenticated users, which could be used t

CVE-2024-45626: Apache James: denial of service through JMAP HTML to text conversion

2025-02-05 Thread Benoit Tellier
Affected versions: - Apache James server 3.8.0 through 3.8.1 - Apache James server through 3.7.5 Description: Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service. Users a

[ANNOUNCE] Apache James 3.8.2 released

2025-02-05 Thread Benoit TELLIER
The Apache James (https://james.apache.org) community is pleased to announce the availability of Apache James 3.8.2. Apache James is a modular email server written in Java. This release delivers bugfixes. The release is available now from our website:     https://james.apache.org/download.html

[ANNOUNCE] Apache James 3.7.6 released

2025-02-05 Thread Benoit TELLIER
The Apache James (https://james.apache.org) community is pleased to announce the availability of Apache James 3.7.6. Apache James is a modular email server written in Java. This release delivers bugfixes. The release is available now from our website:     https://james.apache.org/download.html

[ANNOUNCE] Apache NiFi MiNiFi C++ 0.99.1 release

2025-02-05 Thread Marton Szasz
Hello The Apache NiFi team would like to announce the release of Apache NiFi MiNiFi C++ 0.99.1. New features in this release include: - NiFi 2.0-compatible Python processor support: RecordTransform and FlowFileSource support, and countless small improvements - added support for parameters -

[ANNOUNCE] Apache Pulsar C# Client DotPulsar 4.1.0 released

2025-02-05 Thread David Jensen
The Apache Pulsar team is proud to announce DotPulsar version 4.1.0. Pulsar is a highly scalable, low-latency messaging platform running on commodity hardware. It provides simple pub-sub semantics over topics, guaranteed at least once delivery of messages, automatic cursor management for subscribe