The Apache Software Foundation

Apache James Server 3.8.1

January 09, 2024


The Apache James developers are pleased to announce James server 3.8.1 release.

Early adopters can download it, any issue can be reported on our issue tracker.

The Apache James PMC would like to thank all contributors who made this release possible!

Announcement

This release comprise minor bug fixes enhancing Apache James stability.

This release fixes the following security issues:

  • CVE-2023-51747: SMTP smuggling in Apache James
  • CVE-2023-51518: Privilege escalation via JMX pre-authentication deserialisation

Release changelog

The full changes included in this release can be seen in the CHANGELOG.