To address CVE-2013-2160 [1], we have a new bug fix release candidate apache-camel-2.10.6 ready. This bug fix was necessary, because the Apache Camel feature descriptor for Apache Karaf was still using Apache CXF 2.6.6.1. This release comes with 8 issues resolved [2]. You can find the release notes here [3].
Please find the staging repo here: https://repository.apache.org/content/repositories/orgapachecamel-101/ The tarballs are here https://repository.apache.org/content/repositories/orgapachecamel-101/org/apache/camel/apache-camel/2.10.6/ Tag: https://git-wip-us.apache.org/repos/asf?p=camel.git;a=tag;h=c8ae79c3ca32c54603d2592da1ef6a469aab9915 Please review, help out with testing and vote to approve this release binary. This is our first release which uses the new Confluence version to create the HTML manual. The PDF manual is not created anymore. Please mention what you tested to prevent duplicate work. Your vote counts! [ ] +1 Release the binary as Apache Camel 2.10.6 [ ] -1 Veto the release (provide specific comments) Vote is open for at least 72 hours. [1] https://cxf.apache.org/security-advisories.data/CVE-2013-2160.txt.asc [2] https://issues.apache.org/jira/issues/?jql=project%20%3D%20CAMEL%20AND%20fixVersion%20%3D%20%222.10.6%22 [3] https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311211&version=12324640 Thanks in advance, Christian ----------------- Software Integration Specialist Apache Camel committer: https://camel.apache.org/team V.P. Apache Camel: https://www.apache.org/foundation/ Apache Member: https://www.apache.org/foundation/members.html https://www.linkedin.com/pub/christian-mueller/11/551/642