=====================================================================

                               CERT-Renater

                    Note d'Information No. 2022/VULN319

_____________________________________________________________________

DATE                : 08/09/2022

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Apache James versions prior to
                                           3.7.1.

=====================================================================
https://james.apache.org/james/update/2022/08/26/james-3.7.1.html
_____________________________________________________________________

Apache James Server 3.7.1
  August 26, 2022

The Apache James developers are pleased to announce James server
3.7.1 release.

Early adopters can download it, any issue can be reported on our
issue tracker.

The Apache James PMC would like to thanks all contributors who
  made this release possible!


Announcement

As this is a minor maintenance release.

This release addresses CVE-2022-28220 STARTTLS command injection
in Apache JAMES.

It also includes various bugfixes.


Release changelog

The full changes included in this release can be seen in the
CHANGELOG.


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================