This is an automated email from the ASF dual-hosted git repository. acosentino pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/camel-website.git
The following commit(s) were added to refs/heads/master by this push: new 7c96741 Fixed CVE 11971 7c96741 is described below commit 7c96741c508c44495559bee59305edc09bd84051 Author: Andrea Cosentino <anco...@gmail.com> AuthorDate: Thu May 14 16:21:47 2020 +0200 Fixed CVE 11971 --- content/security/CVE-2020-11971.md | 2 +- content/security/CVE-2020-11971.txt.asc | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/content/security/CVE-2020-11971.md b/content/security/CVE-2020-11971.md index a2783f6..7edfe5c 100644 --- a/content/security/CVE-2020-11971.md +++ b/content/security/CVE-2020-11971.md @@ -7,7 +7,7 @@ type: security-advisory cve: CVE-2020-11971 severity: MEDIUM summary: "Apache Camel JMX Rebind Flaw Vulnerability" -description: "Apache Camel's JMS is vulnerable to Rebind Flaw" +description: "Apache Camel JMX Rebind Flaw Vulnerability" mitigation: "2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0" credit: "This issue was discovered by Colm O. HEigeartaigh <coheigea at apache dot org> from Apache Software Foundation and Jonathan Gallimore <jonathan dot gallimore at gmail dot com> from Tomitribe" affected: 2.22.x, 2.23.x, 2.24.x, 2.25.0, 3.0.0 up to 3.1.0 diff --git a/content/security/CVE-2020-11971.txt.asc b/content/security/CVE-2020-11971.txt.asc index b1fb788..942b928 100644 --- a/content/security/CVE-2020-11971.txt.asc +++ b/content/security/CVE-2020-11971.txt.asc @@ -9,7 +9,7 @@ Vendor: The Apache Software Foundation Versions Affected: Camel 2.25.0, Camel 3.0.0 to 3.1.0. The unsupported Camel 2.x (2.24 and earlier) versions may be also affected. -Description: Apache Camel's File is vulnerable to directory traversal +Description: Apache Camel JMX Rebind Flaw Vulnerability Mitigation: 2.x users should upgrade to 2.25.1, 3.x users should upgrade to 3.2.0 The JIRA tickets: https://issues.apache.org/jira/browse/CAMEL-14811 refers to the various commits that resovoled the issue, and have more details.