Security Releases: OpenNMS 1.10.14, 1.12.8, and 1.13.3

This is an emergency security release which fixes a bug that could expose arbitrary filesystem data to logged-in users through the Web UI.  Upgrading is strongly recommended.

For details on the issue, see:

  http://issues.opennms.org/browse/NMS-6580

Also, a reminder: as of OpenNMS 1.12.7 and 1.13.2, the way OpenNMS starts Jetty has changed, so if you have configured OpenNMS to use AJP, or used other esoteric tweaks to the Jetty configuration in opennms.properties, you will need to adapt them to jetty.xml instead.  For details, see:

  http://bit.ly/1oZ59qp

-- 
Benjamin Reed
The OpenNMS Group
http://www.opennms.org/

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their 
applications. Written by three acclaimed leaders in the field, 
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/NeoTech

_______________________________________________
Please read the OpenNMS Mailing List FAQ:
http://www.opennms.org/wiki/index.php?page=MailingListFaq

opennms-announce mailing list

To *unsubscribe* or change your subscription options, see the bottom of this page:
https://lists.sourceforge.net/lists/listinfo/opennms-announce

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iD8DBQFTkIwDUu+jZtP2Zf4RAm8CAJ0WIVH5UtDa0sGMZqgV0kfm5zRAigCfWjkb
Oi9iF9mPlyOmmRK+mDyMe3U=
=vXwo
-----END PGP SIGNATURE-----