The Apache James developers are pleased to announce James server 3.7.5 release.

Early adopters can download it, any issue can be reported on our issue tracker.

The Apache James PMC would like to thanks all contributors who made this release possible!

Announcement

This release comprise minor bug fixes enhancing Apache James stability.

This release fixes the following security issues:

• CVE-2023-51747: SMTP smuggling in Apache James
• CVE-2023-51518: Privilege escalation via JMX pre-authentication deserialisation

Release changelog

The full changes included in this release can be seen in the CHANGELOG.