CVE-2023-41180: Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++

2023-09-02 Thread Marton Szasz
Severity: important Affected versions: - Apache NiFi MiNiFi C++ 0.13.0 through 0.14.0 Description: Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The

[ANNOUNCE] Apache Jackrabbit Oak 1.56.0 released

2023-09-02 Thread Julian Reschke
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak 1.56.0. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit

[ANNOUNCE] Apache Airflow Providers prepared on August 29, 2023 are released

2023-09-02 Thread Elad Kalif
Dear community, I'm happy to announce that new versions of Airflow Providers packages were just released. https://test.pypi.org/project/apache-airflow-providers-cncf-kubernetes/7.5.0/ https://test.pypi.org/project/apache-airflow-providers-microsoft-azure/6.3.0/ The source release, as well as

[ANNOUNCE] Apache APISIX 3.5.0 has been released

2023-09-02 Thread Xin Rong
Hi folks, The Apache APISIX community is glad to announce that Apache APISIX 3.5.0 has been released. Apache APISIX is a cloud-native microservices API gateway, delivering the ultimate performance, security, open-source and scalable platform for all your APIs and microservices. Apache APISIX is

[ANNOUNCE] Apache SkyWalking Java Agent 9.0.0 released

2023-09-02 Thread Sheng Wu
Hi all, Apache SkyWalking Team is glad to announce the first release of Apache SkyWalking Java Agent 9.0.0. SkyWalking: APM (application performance monitor) tool for distributed systems, especially designed for microservices, cloud native and container-based (Docker, Kubernetes, Mesos)