qpid-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From lqu...@apache.org
Subject [37/38] qpid-site git commit: QPID-7294: Add project specific security page
Date Tue, 07 Jun 2016 12:47:45 GMT
http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/AMQP/AMQP_type_reference.html
----------------------------------------------------------------------
diff --git a/content/AMQP/AMQP_type_reference.html b/content/AMQP/AMQP_type_reference.html
index 838b52e..8fc42b9 100644
--- a/content/AMQP/AMQP_type_reference.html
+++ b/content/AMQP/AMQP_type_reference.html
@@ -126,7 +126,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/amqp.html
----------------------------------------------------------------------
diff --git a/content/amqp.html b/content/amqp.html
index 1656ec5..707aa15 100644
--- a/content/amqp.html
+++ b/content/amqp.html
@@ -126,7 +126,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/amqp/index.html
----------------------------------------------------------------------
diff --git a/content/amqp/index.html b/content/amqp/index.html
index 8dbf337..8c1b263 100644
--- a/content/amqp/index.html
+++ b/content/amqp/index.html
@@ -177,7 +177,7 @@ whose aim is to help you make your application speak AMQP.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/amqp/type-reference.html
----------------------------------------------------------------------
diff --git a/content/amqp/type-reference.html b/content/amqp/type-reference.html
index d4b4867..79a3da6 100644
--- a/content/amqp/type-reference.html
+++ b/content/amqp/type-reference.html
@@ -10518,7 +10518,7 @@ function hide_all_tables()
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/cpp-broker/index.html
----------------------------------------------------------------------
diff --git a/content/components/cpp-broker/index.html b/content/components/cpp-broker/index.html
index 097fa1f..d293c9f 100644
--- a/content/components/cpp-broker/index.html
+++ b/content/components/cpp-broker/index.html
@@ -210,7 +210,7 @@ that stores, routes, and forwards messages using AMQP.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/cpp-broker/security.html
----------------------------------------------------------------------
diff --git a/content/components/cpp-broker/security.html b/content/components/cpp-broker/security.html
new file mode 100644
index 0000000..546a269
--- /dev/null
+++ b/content/components/cpp-broker/security.html
@@ -0,0 +1,314 @@
+<!DOCTYPE html>
+<!--
+ -
+ - Licensed to the Apache Software Foundation (ASF) under one
+ - or more contributor license agreements.  See the NOTICE file
+ - distributed with this work for additional information
+ - regarding copyright ownership.  The ASF licenses this file
+ - to you under the Apache License, Version 2.0 (the
+ - "License"); you may not use this file except in compliance
+ - with the License.  You may obtain a copy of the License at
+ -
+ -   http://www.apache.org/licenses/LICENSE-2.0
+ -
+ - Unless required by applicable law or agreed to in writing,
+ - software distributed under the License is distributed on an
+ - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ - KIND, either express or implied.  See the License for the
+ - specific language governing permissions and limitations
+ - under the License.
+ -
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+  <head>
+    <title>Security - Apache Qpid&#8482;</title>
+    <meta http-equiv="X-UA-Compatible" content="IE=edge"/>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+    <link rel="stylesheet" href="/site.css" type="text/css" async="async"/>
+    <link rel="stylesheet" href="/deferred.css" type="text/css" defer="defer"/>
+    <script type="text/javascript">var _deferredFunctions = [];</script>
+    <script type="text/javascript" src="/deferred.js" defer="defer"></script>
+    <!--[if lte IE 8]>
+      <link rel="stylesheet" href="/ie.css" type="text/css"/>
+      <script type="text/javascript" src="/html5shiv.js"></script>
+    <![endif]-->
+
+    <!-- Redirects for `go get` and godoc.org -->
+    <meta name="go-import"
+          content="qpid.apache.org git https://git-wip-us.apache.org/repos/asf/qpid-proton.git"/>
+    <meta name="go-source"
+          content="qpid.apache.org
+https://github.com/apache/qpid-proton/blob/go1/README.md
+https://github.com/apache/qpid-proton/tree/go1{/dir}
+https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
+  </head>
+  <body>
+    <div id="-content">
+      <div id="-top" class="panel">
+        <a id="-menu-link"><img width="16" height="16" src="" alt="Menu"/></a>
+
+        <a id="-search-link"><img width="22" height="16" src="" alt="Search"/></a>
+
+        <ul id="-global-navigation">
+          <li><a id="-logotype" href="/index.html">Apache Qpid<sup>&#8482;</sup></a></li>
+          <li><a href="/documentation.html">Documentation</a></li>
+          <li><a href="/download.html">Download</a></li>
+          <li><a href="/discussion.html">Discussion</a></li>
+        </ul>
+      </div>
+
+      <div id="-menu" class="panel" style="display: none;">
+        <div class="flex">
+          <section>
+            <h3>Project</h3>
+
+            <ul>
+              <li><a href="/overview.html">Overview</a></li>
+              <li><a href="/components/index.html">Components</a></li>
+              <li><a href="/releases/index.html">Releases</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Messaging APIs</h3>
+
+            <ul>
+              <li><a href="/proton/index.html">Qpid Proton</a></li>
+              <li><a href="/components/jms/index.html">Qpid JMS</a></li>
+              <li><a href="/components/messaging-api/index.html">Qpid Messaging API</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Servers and tools</h3>
+
+            <ul>
+              <li><a href="/components/java-broker/index.html">Java broker</a></li>
+              <li><a href="/components/cpp-broker/index.html">C++ broker</a></li>
+              <li><a href="/components/dispatch-router/index.html">Dispatch router</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Resources</h3>
+
+            <ul>
+              <li><a href="/dashboard.html">Dashboard</a></li>
+              <li><a href="https://cwiki.apache.org/confluence/display/qpid/Index">Wiki</a></li>
+              <li><a href="/resources.html">More resources</a></li>
+            </ul>
+          </section>
+        </div>
+      </div>
+
+      <div id="-search" class="panel" style="display: none;">
+        <form action="http://www.google.com/search" method="get">
+          <input type="hidden" name="sitesearch" value="qpid.apache.org"/>
+          <input type="text" name="q" maxlength="255" autofocus="autofocus" tabindex="1"/>
+          <button type="submit">Search</button>
+          <a href="/search.html">More ways to search</a>
+        </form>
+      </div>
+
+      <div id="-middle" class="panel">
+        <ul id="-path-navigation"><li><a href="/index.html">Home</a></li><li><a href="/components/index.html">Components</a></li><li><a href="/components/cpp-broker/index.html">C++ Broker</a></li><li>Security</li></ul>
+
+        <div id="-middle-content">
+          <h1 id="security">Security</h1>
+
+<section>
+
+<h2 id="c-broker">C++ Broker</h2>
+
+<table>
+  <thead>
+    <tr>
+      <th>CVE-ID</th><th>Severity</th><th>Affected&nbsp;Versions</th><th>Fixed&nbsp;in&nbsp;Versions</th><th>Description</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>CVE-2015-0224</td>
+      <td>Moderate</td>
+      <td>0.30 and earlier</td>
+      <td>0.32 and later</td>
+      <td>qpidd can be crashed by unauthenticated user
+    <a id="CVE_2015_0224_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2015_0224_details', controlId:'CVE_2015_0224_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+    <div style="display:none;" id="CVE_2015_0224_details">
+      <p>Description: In CVE-2015-0203 it was announced that
+        certain unexpected protocol sequences cause the broker
+        process to crash due to insufficient checking, but that
+        authentication could be used to restrict the exploitation
+        of this vulnerability.<br/>  It has now been discovered
+        that in fact failing authentication does not necessarily
+        prevent exploitation of those reported
+        vulnerabilities.<br/>  Further, it was stated that one of
+        the specific vulnerabilities was that the qpidd broker can
+        be crashed by sending it a sequence-set containing an
+        invalid range, where the start of the range is after the
+        end. This was an incorrect analysis of the vulnerability,
+        which is in fact caused by a sequence-set containing a
+        single range expressing the maximum possible gap.</p>
+
+      <p>Solution: A further patch is available that handles a
+      range expressing the maximum possible gap without assertion
+      (<a href="https://issues.apache.org/jira/browse/QPID-6310">QPID-6310</a>). The
+      fix will be included in subsequent releases, but can be
+      applied to 0.30 if desired.</p>
+
+      <p>Credit: This issue was discovered by G. Geshev from MWR
+      Labs</p>
+    </div>
+     </td>
+    </tr>
+
+    <tr>
+      <td>CVE-2015-0223</td>
+      <td>Moderate</td>
+      <td>0.30 and earlier</td>
+      <td>0.32 and later</td>
+      <td>anonymous access to qpidd cannot be prevented
+    <a id="CVE_2015_0223_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2015_0223_details', controlId:'CVE_2015_0223_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+    <div style="display:none;" id="CVE_2015_0223_details">
+      <p>Description: An attacker can gain access to qpidd as an
+      anonymous user, even if the ANONYMOUS mechanism is
+      disallowed.</p>
+
+      <p>Solution: A patch is available
+      (<a href="https://issues.apache.org/jira/browse/QPID-6325">QPID-6325</a>)
+      that addresses this vulnerability. The fix will be included
+      in subsequent releases, but can be applied to 0.30 if
+      desired.</p>
+
+      <p>Common Vulnerability Score information: Authorization can
+      be used to restrict access to broker entities such as queue
+      and exchanges.</p>
+
+      <p>Credit: This issue was discovered by G. Geshev from MWR
+      Labs</p>
+    </div>
+     </td>
+    </tr>
+
+    <tr>
+      <td>CVE-2015-0203</td>
+      <td>Moderate</td>
+      <td>0.30 and earlier</td>
+      <td>0.32 and later</td>
+      <td>qpidd can be crashed by authenticated user
+    <a id="CVE_2015_0203_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2015_0203_details', controlId:'CVE_2015_0203_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+    <div style="display:none;" id="CVE_2015_0203_details">
+      <p>Description: Certain unexpected protocol sequences cause
+      the broker process to crash due to insufficient
+      checking. Three distinct cases were identified as follows:<br/>
+      The AMQP 0-10 protocol defines a sequence set containing
+      id ranges. The qpidd broker can be crashed by sending it a
+      sequence-set containing an invalid range, where the start of
+      the range is after the end. This condition causes an
+      assertion, which causes the broker process to exit.<br/>
+      The AMQP 0-10 protocol defines header- and body- segments
+      that may follow certain commands. The only command for which
+      such segments are expected by qpidd is the message-transfer
+      command. If another command is sent that includes header
+      and/or body segments, this will cause a segmentation fault
+      in the broker process, causing it then to exit.<br/>
+      The AMQP 0-10 protocol defines a session-gap control that
+      can be sent on any established session. The qpidd broker
+      does not support this control and responds with an
+      appropriate error if requested on an established
+      session. However, if the control is sent before the session
+      is opened, the brokers handling causes an assertion which
+      results in the broker process exiting.</p>
+
+      <p>Solution: A patch is available
+      (<a href="https://issues.apache.org/jira/browse/QPID-6310">QPID-6310</a>)
+      that handles all these errors by sending an exception
+      control to the remote peer and leave the broker available to
+      all other users. The fix will be included in subsequent
+      releases, but can be applied to 0.30 if desired.</p>
+
+      <p>Common Vulnerability Score information: Authentication
+      can be used to restrict access to the broker. However any
+      authenticated user would be able to trigger this condition
+      which could therefore be considered a form of denial of
+      service.</p>
+
+      <p>Credit: This issue was discovered by G. Geshev from MWR
+      Labs</p>
+    </div>
+     </td>
+    </tr>
+
+    <tr>
+      <td>CVE-2014-3629</td>
+      <td>Low</td>
+      <td>0.30 and earlier</td>
+      <td>0.32 and later</td>
+      <td>qpidd can be induced to make http requests
+    <a id="CVE_2014_3629_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2014_3629_details', controlId:'CVE_2014_3629_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+    <div style="display:none;" id="CVE_2014_3629_details">
+      <p>Description: The XML exchange type is an optional,
+      dynamically loaded module for qpidd that allows creation of
+      exchanges that route messages based on evaluating an xquery
+      expression against them.<br/>On parsing a message sent to an
+      XML exchange, whose body is XML containing a link to a DTD,
+      the broker process will attempt to retrieve the referenced
+      resource(s). I.e. the broker process may be induced to make
+      outgoing HTTP connections by publishing a message containing
+      links to an XML exchange.</p>
+
+      <p>Solution:
+      A <a href="https://issues.apache.org/jira/secure/attachment/12680198/QPID-6218.patch">patch</a>
+      is available that prevents any retrieval of external
+      entities referenced in the XML. This will be included in
+      subsequent releases, but can be applied to 0.30 if
+      desired.</p>
+
+      <p>Common Vulnerability Score information: If the XML
+      exchange functionality is not required, the module in
+      question need not be loaded at all. This can be done either
+      by moving the module - named xml.so - out of the module
+      directory, or by setting the --no-module-dir option and
+      adding an explicit --load-module argument for every required
+      module.<br/>Where the XML exchange functionality is
+      required, authorisation may be enabled to prevent all but
+      trusted users from creating or publishing to xml
+      exchanges.</p>
+
+      <p>Credit: This issue was discovered by G. Geshev from MWR
+      Labs</p>
+    </div>
+     </td>
+    </tr>
+  </tbody>
+</table>
+
+</section>
+
+
+          <hr/>
+
+          <ul id="-apache-navigation">
+            <li><a href="http://www.apache.org/">Apache</a></li>
+            <li><a href="http://www.apache.org/licenses/">License</a></li>
+            <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+            <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
+            <li><a href="/security.html">Security</a></li>
+            <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
+          </ul>
+
+          <p id="-legal">
+            Apache Qpid, Messaging built on AMQP; Copyright &#169; 2015
+            The Apache Software Foundation; Licensed under
+            the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache
+            License, Version 2.0</a>; Apache Qpid, Qpid, Qpid Proton,
+            Proton, Apache, the Apache feather logo, and the Apache Qpid
+            project logo are trademarks of The Apache Software
+            Foundation; All other marks mentioned may be trademarks or
+            registered trademarks of their respective owners
+          </p>
+        </div>
+      </div>
+    </div>
+  </body>
+</html>

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/dispatch-router/addressing.html
----------------------------------------------------------------------
diff --git a/content/components/dispatch-router/addressing.html b/content/components/dispatch-router/addressing.html
index e382951..747f17a 100644
--- a/content/components/dispatch-router/addressing.html
+++ b/content/components/dispatch-router/addressing.html
@@ -256,7 +256,7 @@ transactional delivery, etc.) are available over a routed link-chain.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/dispatch-router/amqp-mapping.html
----------------------------------------------------------------------
diff --git a/content/components/dispatch-router/amqp-mapping.html b/content/components/dispatch-router/amqp-mapping.html
index 6fb741c..5061504 100644
--- a/content/components/dispatch-router/amqp-mapping.html
+++ b/content/components/dispatch-router/amqp-mapping.html
@@ -381,7 +381,7 @@ the details of Dispatch Router's use of AMQP.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/dispatch-router/index.html
----------------------------------------------------------------------
diff --git a/content/components/dispatch-router/index.html b/content/components/dispatch-router/index.html
index 9303fe3..646c260 100644
--- a/content/components/dispatch-router/index.html
+++ b/content/components/dispatch-router/index.html
@@ -202,7 +202,7 @@ they be clients, brokers or other AMQP-enabled services.  More about
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/dispatch-router/overview.html
----------------------------------------------------------------------
diff --git a/content/components/dispatch-router/overview.html b/content/components/dispatch-router/overview.html
index bb64dc8..1967c00 100644
--- a/content/components/dispatch-router/overview.html
+++ b/content/components/dispatch-router/overview.html
@@ -158,7 +158,7 @@ involving a broker at all.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/dispatch-router/release-0.1.html
----------------------------------------------------------------------
diff --git a/content/components/dispatch-router/release-0.1.html b/content/components/dispatch-router/release-0.1.html
index 1a19f17..a6fff30 100644
--- a/content/components/dispatch-router/release-0.1.html
+++ b/content/components/dispatch-router/release-0.1.html
@@ -469,7 +469,7 @@ ANONYMOUS for testing.</li>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/index.html
----------------------------------------------------------------------
diff --git a/content/components/index.html b/content/components/index.html
index 23ba69f..50d54a4 100644
--- a/content/components/index.html
+++ b/content/components/index.html
@@ -237,7 +237,7 @@ but they do not require C++ or Java clients for communication.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/java-broker/index.html
----------------------------------------------------------------------
diff --git a/content/components/java-broker/index.html b/content/components/java-broker/index.html
index 6ce643b..a83183c 100644
--- a/content/components/java-broker/index.html
+++ b/content/components/java-broker/index.html
@@ -208,7 +208,7 @@ that stores, routes, and forwards messages using AMQP.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/java-broker/security.html
----------------------------------------------------------------------
diff --git a/content/components/java-broker/security.html b/content/components/java-broker/security.html
new file mode 100644
index 0000000..ffaf015
--- /dev/null
+++ b/content/components/java-broker/security.html
@@ -0,0 +1,241 @@
+<!DOCTYPE html>
+<!--
+ -
+ - Licensed to the Apache Software Foundation (ASF) under one
+ - or more contributor license agreements.  See the NOTICE file
+ - distributed with this work for additional information
+ - regarding copyright ownership.  The ASF licenses this file
+ - to you under the Apache License, Version 2.0 (the
+ - "License"); you may not use this file except in compliance
+ - with the License.  You may obtain a copy of the License at
+ -
+ -   http://www.apache.org/licenses/LICENSE-2.0
+ -
+ - Unless required by applicable law or agreed to in writing,
+ - software distributed under the License is distributed on an
+ - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ - KIND, either express or implied.  See the License for the
+ - specific language governing permissions and limitations
+ - under the License.
+ -
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+  <head>
+    <title>Security - Apache Qpid&#8482;</title>
+    <meta http-equiv="X-UA-Compatible" content="IE=edge"/>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+    <link rel="stylesheet" href="/site.css" type="text/css" async="async"/>
+    <link rel="stylesheet" href="/deferred.css" type="text/css" defer="defer"/>
+    <script type="text/javascript">var _deferredFunctions = [];</script>
+    <script type="text/javascript" src="/deferred.js" defer="defer"></script>
+    <!--[if lte IE 8]>
+      <link rel="stylesheet" href="/ie.css" type="text/css"/>
+      <script type="text/javascript" src="/html5shiv.js"></script>
+    <![endif]-->
+
+    <!-- Redirects for `go get` and godoc.org -->
+    <meta name="go-import"
+          content="qpid.apache.org git https://git-wip-us.apache.org/repos/asf/qpid-proton.git"/>
+    <meta name="go-source"
+          content="qpid.apache.org
+https://github.com/apache/qpid-proton/blob/go1/README.md
+https://github.com/apache/qpid-proton/tree/go1{/dir}
+https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
+  </head>
+  <body>
+    <div id="-content">
+      <div id="-top" class="panel">
+        <a id="-menu-link"><img width="16" height="16" src="" alt="Menu"/></a>
+
+        <a id="-search-link"><img width="22" height="16" src="" alt="Search"/></a>
+
+        <ul id="-global-navigation">
+          <li><a id="-logotype" href="/index.html">Apache Qpid<sup>&#8482;</sup></a></li>
+          <li><a href="/documentation.html">Documentation</a></li>
+          <li><a href="/download.html">Download</a></li>
+          <li><a href="/discussion.html">Discussion</a></li>
+        </ul>
+      </div>
+
+      <div id="-menu" class="panel" style="display: none;">
+        <div class="flex">
+          <section>
+            <h3>Project</h3>
+
+            <ul>
+              <li><a href="/overview.html">Overview</a></li>
+              <li><a href="/components/index.html">Components</a></li>
+              <li><a href="/releases/index.html">Releases</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Messaging APIs</h3>
+
+            <ul>
+              <li><a href="/proton/index.html">Qpid Proton</a></li>
+              <li><a href="/components/jms/index.html">Qpid JMS</a></li>
+              <li><a href="/components/messaging-api/index.html">Qpid Messaging API</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Servers and tools</h3>
+
+            <ul>
+              <li><a href="/components/java-broker/index.html">Java broker</a></li>
+              <li><a href="/components/cpp-broker/index.html">C++ broker</a></li>
+              <li><a href="/components/dispatch-router/index.html">Dispatch router</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Resources</h3>
+
+            <ul>
+              <li><a href="/dashboard.html">Dashboard</a></li>
+              <li><a href="https://cwiki.apache.org/confluence/display/qpid/Index">Wiki</a></li>
+              <li><a href="/resources.html">More resources</a></li>
+            </ul>
+          </section>
+        </div>
+      </div>
+
+      <div id="-search" class="panel" style="display: none;">
+        <form action="http://www.google.com/search" method="get">
+          <input type="hidden" name="sitesearch" value="qpid.apache.org"/>
+          <input type="text" name="q" maxlength="255" autofocus="autofocus" tabindex="1"/>
+          <button type="submit">Search</button>
+          <a href="/search.html">More ways to search</a>
+        </form>
+      </div>
+
+      <div id="-middle" class="panel">
+        <ul id="-path-navigation"><li><a href="/index.html">Home</a></li><li><a href="/components/index.html">Components</a></li><li><a href="/components/java-broker/index.html">Java Broker</a></li><li>Security</li></ul>
+
+        <div id="-middle-content">
+          <h1 id="security">Security</h1>
+
+<section>
+
+<h2 id="java-broker">Java Broker</h2>
+
+<h3 id="cves">CVEs</h3>
+
+<table>
+  <thead>
+    <tr>
+      <th>CVE-ID</th><th>Severity</th><th>Affected&nbsp;Versions</th><th>Fixed&nbsp;in&nbsp;Versions</th><th>Description</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>CVE-2016-4432</td>
+      <td>Important</td>
+      <td>6.0.2 and earlier</td>
+      <td><a href="/releases/qpid-java-6.0.3/">6.0.3</a></td>
+      <td>
+        Authentication Bypass. <a id="CVE_2016_4432_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2016_4432_details', controlId:'CVE_2016_4432_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+        <div style="display:none;" id="CVE_2016_4432_details">
+          <p>Versions Affected: Qpid Java Broker versions 6.0.2 and
+          earlier</p>
+          <p>Description: The code responsible for handling incoming
+          AMQP 0-8, 0-9, 0-91, and 0-10 connections contains a flaw
+          that allows authentication to be bypassed.  An remote
+          attacker can exploit this vulnerability to perform actions,
+          without the need to specify valid credentials.  For
+          instance, unauthorised messages could be injected or
+          messages stolen.<br/>The vulnerability cannot be exploited
+          if the Access Control List (ACL) feature is enabled AND
+          access to all virtual hosts controlled.<br/>The
+          vulnerability does not apply to the Broker's AMQP 1.0
+          support.<br/>The vulnerability does not apply if the Broker
+          is configured to require SSL client authentication for all
+          messaging connections.</p>
+          <p>Resolution: Users should upgrade the Qpid Java Broker to
+          version 6.0.3 or later (recommended).</p>
+          <p>Mitigation: If upgrading is not possible, the
+          vulnerability can be mitigated using an ACL file containing
+          "ACCESS VIRTUALHOST" clauses that white-lists user access to
+          all virtualhosts.<br/>If AMQP 0-8, 0-9, 0-91, and 0-10
+          support is not required, the vulnerability can also be
+          mitigated by turning off these protocols at the Port
+          level.</p>
+          <p>References: <a href="https://issues.apache.org/jira/browse/QPID-7257">QPID-7257</a></p>
+        </div>
+      </td>
+    </tr>
+
+    <tr>
+      <td>CVE-2016-3094</td>
+      <td>Important</td>
+      <td>6.0.0, 6.0.1, 6.0.2</td>
+      <td><a href="/releases/qpid-java-6.0.3/">6.0.3</a></td>
+      <td>
+        Denial of Service.
+        <a id="CVE_2016_3094_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2016_3094_details', controlId:'CVE_2016_3094_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+        <div style="display:none;" id="CVE_2016_3094_details">
+          <p>Versions Affected: Qpid Java Broker versions 6.0.0,
+          6.0.1, and 6.0.2</p>
+          <p>Description: A malformed authentication attempt may cause
+          the broker to terminate.  The Qpid Java Broker supports a
+          number of configurable authentication providers each
+          supporting various SASL mechanisms. Some mechanisms need (or
+          can be configured to accept) plain-text passwords being sent
+          to the Broker (using the SASL "PLAIN" mechanism).  Where the
+          broker has been configured to allow plain-text passwords for
+          authentication it is possible for a client to send a
+          malformed authentication attempt which will lead the broker
+          to terminate due to an uncaught Exception.<br/>  Brokers
+          configured to use authentication from the
+          "PlainPasswordFile", "SimpleLDAP", or
+          "Base64MD5PasswordFile" providers are vulnerable if the
+          "PLAIN" mechanism is enabled (by default "PLAIN" will be
+          disabled on non-TLS ports, but enabled on TLS
+          connections).</p>
+          <p>Mitigation: Users should upgrade their Qpid Java Broker
+          to version 6.0.3 or later.  If this is not possible, users
+          can disable the PLAIN mechanism for their authentication
+          manager on versions 0.32 and later by adding "PLAIN" to the
+          list of disabledMechanisms on their authentication provider
+          object.<br/>Note that the SimpleLDAP authentication provider
+          requires PLAIN and so this work around does not apply
+          there.</p>
+          <p>Credit: This issue was discovered by Alex Szczuczko of
+          Red Hat, Inc.</p>
+          <p>References: <a href="https://issues.apache.org/jira/browse/QPID-7271">QPID-7271</a></p>
+        </div>
+      </td>
+    </tr>
+  </tbody>
+</table>
+
+</section>
+
+
+          <hr/>
+
+          <ul id="-apache-navigation">
+            <li><a href="http://www.apache.org/">Apache</a></li>
+            <li><a href="http://www.apache.org/licenses/">License</a></li>
+            <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+            <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
+            <li><a href="/security.html">Security</a></li>
+            <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
+          </ul>
+
+          <p id="-legal">
+            Apache Qpid, Messaging built on AMQP; Copyright &#169; 2015
+            The Apache Software Foundation; Licensed under
+            the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache
+            License, Version 2.0</a>; Apache Qpid, Qpid, Qpid Proton,
+            Proton, Apache, the Apache feather logo, and the Apache Qpid
+            project logo are trademarks of The Apache Software
+            Foundation; All other marks mentioned may be trademarks or
+            registered trademarks of their respective owners
+          </p>
+        </div>
+      </div>
+    </div>
+  </body>
+</html>

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/jms/amqp-0-x.html
----------------------------------------------------------------------
diff --git a/content/components/jms/amqp-0-x.html b/content/components/jms/amqp-0-x.html
index 2f035e9..5d0d6a2 100644
--- a/content/components/jms/amqp-0-x.html
+++ b/content/components/jms/amqp-0-x.html
@@ -166,7 +166,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/jms/amqp-1.0-prototype.html
----------------------------------------------------------------------
diff --git a/content/components/jms/amqp-1.0-prototype.html b/content/components/jms/amqp-1.0-prototype.html
index 1e98451..e5798a8 100644
--- a/content/components/jms/amqp-1.0-prototype.html
+++ b/content/components/jms/amqp-1.0-prototype.html
@@ -168,7 +168,7 @@ look at the newer <a href="index.html">Qpid JMS</a> AMQP 1.0 client.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/jms/index.html
----------------------------------------------------------------------
diff --git a/content/components/jms/index.html b/content/components/jms/index.html
index 37755cf..c251579 100644
--- a/content/components/jms/index.html
+++ b/content/components/jms/index.html
@@ -200,7 +200,7 @@ API compatible</li>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/messaging-api/index.html
----------------------------------------------------------------------
diff --git a/content/components/messaging-api/index.html b/content/components/messaging-api/index.html
index 20433ee..b2a50e2 100644
--- a/content/components/messaging-api/index.html
+++ b/content/components/messaging-api/index.html
@@ -245,7 +245,7 @@ find previous versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/qmf/index.html
----------------------------------------------------------------------
diff --git a/content/components/qmf/index.html b/content/components/qmf/index.html
index 3b9fafc..a04855a 100644
--- a/content/components/qmf/index.html
+++ b/content/components/qmf/index.html
@@ -182,7 +182,7 @@ find previous versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/qpid-jca/index.html
----------------------------------------------------------------------
diff --git a/content/components/qpid-jca/index.html b/content/components/qpid-jca/index.html
index 8e2e58d..30621a1 100644
--- a/content/components/qpid-jca/index.html
+++ b/content/components/qpid-jca/index.html
@@ -196,7 +196,7 @@ find previous versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/components/qpid-wcf/index.html
----------------------------------------------------------------------
diff --git a/content/components/qpid-wcf/index.html b/content/components/qpid-wcf/index.html
index b1b37a7..60ff6e2 100644
--- a/content/components/qpid-wcf/index.html
+++ b/content/components/qpid-wcf/index.html
@@ -196,7 +196,7 @@ find previous versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/contributors.html
----------------------------------------------------------------------
diff --git a/content/contributors.html b/content/contributors.html
index 4669756..1c43f59 100644
--- a/content/contributors.html
+++ b/content/contributors.html
@@ -248,7 +248,7 @@ generously support its ongoing work.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/dashboard.html
----------------------------------------------------------------------
diff --git a/content/dashboard.html b/content/dashboard.html
index 6e8d9a6..2afec53 100644
--- a/content/dashboard.html
+++ b/content/dashboard.html
@@ -264,7 +264,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/deferred.js
----------------------------------------------------------------------
diff --git a/content/deferred.js b/content/deferred.js
index 763e16c..84de156 100644
--- a/content/deferred.js
+++ b/content/deferred.js
@@ -420,6 +420,18 @@ function _modifyCurrentReleaseLinks() {
     }
 }
 
+function _toggleDiv(toggleInfo) {
+    var div = document.getElementById(toggleInfo.divId);
+    var control = document.getElementById(toggleInfo.controlId);
+    if (div.style.display !== "none") {
+	div.style.display = "none";
+	control.innerHTML = toggleInfo.showMore;
+    } else {
+	div.style.display = "block";
+	control.innerHTML = toggleInfo.showLess;
+    }
+}
+
 _updateGlobalNavigation();
 
 _addEventListener("-menu-link", "click", _toggleMenu);

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/discussion.html
----------------------------------------------------------------------
diff --git a/content/discussion.html b/content/discussion.html
index bdf5a13..3e96d4f 100644
--- a/content/discussion.html
+++ b/content/discussion.html
@@ -192,7 +192,7 @@ unsubscribe address.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/documentation.html
----------------------------------------------------------------------
diff --git a/content/documentation.html b/content/documentation.html
index 1cb9d1a..eb3f55d 100644
--- a/content/documentation.html
+++ b/content/documentation.html
@@ -228,7 +228,7 @@ You can find older versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/download.html
----------------------------------------------------------------------
diff --git a/content/download.html b/content/download.html
index dc471a5..de48726 100644
--- a/content/download.html
+++ b/content/download.html
@@ -267,7 +267,7 @@ rather than from a mirror.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/electron/index.html
----------------------------------------------------------------------
diff --git a/content/electron/index.html b/content/electron/index.html
index bcb409a..e9d836a 100644
--- a/content/electron/index.html
+++ b/content/electron/index.html
@@ -125,7 +125,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/get-involved.html
----------------------------------------------------------------------
diff --git a/content/get-involved.html b/content/get-involved.html
index 751a2ba..b89af8d 100644
--- a/content/get-involved.html
+++ b/content/get-involved.html
@@ -179,7 +179,7 @@ project's website.  We really appreciate it.</p></li>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/index.html
----------------------------------------------------------------------
diff --git a/content/index.html b/content/index.html
index dfbe01e..07fd392 100644
--- a/content/index.html
+++ b/content/index.html
@@ -173,7 +173,6 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
       <li><a href="http://www.apache.org/licenses/">License</a></li>
       <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
       <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-      <li><a href="http://www.apache.org/security/">Security</a></li>
     </ul>
   </section>
 
@@ -186,6 +185,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
       <li><a href="/discussion.html">Discussion</a></li>
       <li><a href="/components/index.html">Components</a></li>
       <li><a href="/releases/index.html">Releases</a></li>
+      <li><a href="/security.html">Security</a></li>
       <li><a href="/resources.html">More resources</a></li>
     </ul>
   </section>
@@ -203,7 +203,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/issues.html
----------------------------------------------------------------------
diff --git a/content/issues.html b/content/issues.html
index 4606603..8de3cd6 100644
--- a/content/issues.html
+++ b/content/issues.html
@@ -232,7 +232,7 @@ you give to make Qpid better.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/maven.html
----------------------------------------------------------------------
diff --git a/content/maven.html b/content/maven.html
index 67753ef..0f5c756 100644
--- a/content/maven.html
+++ b/content/maven.html
@@ -170,7 +170,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/overview.html
----------------------------------------------------------------------
diff --git a/content/overview.html b/content/overview.html
index 2b0359d..f8df07e 100644
--- a/content/overview.html
+++ b/content/overview.html
@@ -219,7 +219,7 @@ technologies.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/packages.html
----------------------------------------------------------------------
diff --git a/content/packages.html b/content/packages.html
index 8b2ee0b..2a95c2d 100644
--- a/content/packages.html
+++ b/content/packages.html
@@ -208,7 +208,7 @@ distributions.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/contributing.html
----------------------------------------------------------------------
diff --git a/content/proton/contributing.html b/content/proton/contributing.html
index b08d612..544b007 100644
--- a/content/proton/contributing.html
+++ b/content/proton/contributing.html
@@ -129,7 +129,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/development.html
----------------------------------------------------------------------
diff --git a/content/proton/development.html b/content/proton/development.html
index 46f12b5..b032d6e 100644
--- a/content/proton/development.html
+++ b/content/proton/development.html
@@ -146,7 +146,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/index.html
----------------------------------------------------------------------
diff --git a/content/proton/index.html b/content/proton/index.html
index a09b3e8..9dedc41 100644
--- a/content/proton/index.html
+++ b/content/proton/index.html
@@ -209,7 +209,7 @@ platform, environment, or language. More about
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/messenger.html
----------------------------------------------------------------------
diff --git a/content/proton/messenger.html b/content/proton/messenger.html
index e263fb5..e7f79a6 100644
--- a/content/proton/messenger.html
+++ b/content/proton/messenger.html
@@ -149,7 +149,7 @@ find previous versions with our
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/overview.html
----------------------------------------------------------------------
diff --git a/content/proton/overview.html b/content/proton/overview.html
index 525834e..64b887f 100644
--- a/content/proton/overview.html
+++ b/content/proton/overview.html
@@ -156,7 +156,7 @@ but also for connecting them to the broader ecosystem of AMQP
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/proton-j-proton-c.html
----------------------------------------------------------------------
diff --git a/content/proton/proton-j-proton-c.html b/content/proton/proton-j-proton-c.html
index cde0e30..044e722 100644
--- a/content/proton/proton-j-proton-c.html
+++ b/content/proton/proton-j-proton-c.html
@@ -172,7 +172,7 @@ reported as "skipped" rather than flagged as an error.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/security.html
----------------------------------------------------------------------
diff --git a/content/proton/security.html b/content/proton/security.html
new file mode 100644
index 0000000..0685c05
--- /dev/null
+++ b/content/proton/security.html
@@ -0,0 +1,206 @@
+<!DOCTYPE html>
+<!--
+ -
+ - Licensed to the Apache Software Foundation (ASF) under one
+ - or more contributor license agreements.  See the NOTICE file
+ - distributed with this work for additional information
+ - regarding copyright ownership.  The ASF licenses this file
+ - to you under the Apache License, Version 2.0 (the
+ - "License"); you may not use this file except in compliance
+ - with the License.  You may obtain a copy of the License at
+ -
+ -   http://www.apache.org/licenses/LICENSE-2.0
+ -
+ - Unless required by applicable law or agreed to in writing,
+ - software distributed under the License is distributed on an
+ - "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ - KIND, either express or implied.  See the License for the
+ - specific language governing permissions and limitations
+ - under the License.
+ -
+-->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
+  <head>
+    <title>Security - Apache Qpid&#8482;</title>
+    <meta http-equiv="X-UA-Compatible" content="IE=edge"/>
+    <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+    <link rel="stylesheet" href="/site.css" type="text/css" async="async"/>
+    <link rel="stylesheet" href="/deferred.css" type="text/css" defer="defer"/>
+    <script type="text/javascript">var _deferredFunctions = [];</script>
+    <script type="text/javascript" src="/deferred.js" defer="defer"></script>
+    <!--[if lte IE 8]>
+      <link rel="stylesheet" href="/ie.css" type="text/css"/>
+      <script type="text/javascript" src="/html5shiv.js"></script>
+    <![endif]-->
+
+    <!-- Redirects for `go get` and godoc.org -->
+    <meta name="go-import"
+          content="qpid.apache.org git https://git-wip-us.apache.org/repos/asf/qpid-proton.git"/>
+    <meta name="go-source"
+          content="qpid.apache.org
+https://github.com/apache/qpid-proton/blob/go1/README.md
+https://github.com/apache/qpid-proton/tree/go1{/dir}
+https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
+  </head>
+  <body>
+    <div id="-content">
+      <div id="-top" class="panel">
+        <a id="-menu-link"><img width="16" height="16" src="" alt="Menu"/></a>
+
+        <a id="-search-link"><img width="22" height="16" src="" alt="Search"/></a>
+
+        <ul id="-global-navigation">
+          <li><a id="-logotype" href="/index.html">Apache Qpid<sup>&#8482;</sup></a></li>
+          <li><a href="/documentation.html">Documentation</a></li>
+          <li><a href="/download.html">Download</a></li>
+          <li><a href="/discussion.html">Discussion</a></li>
+        </ul>
+      </div>
+
+      <div id="-menu" class="panel" style="display: none;">
+        <div class="flex">
+          <section>
+            <h3>Project</h3>
+
+            <ul>
+              <li><a href="/overview.html">Overview</a></li>
+              <li><a href="/components/index.html">Components</a></li>
+              <li><a href="/releases/index.html">Releases</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Messaging APIs</h3>
+
+            <ul>
+              <li><a href="/proton/index.html">Qpid Proton</a></li>
+              <li><a href="/components/jms/index.html">Qpid JMS</a></li>
+              <li><a href="/components/messaging-api/index.html">Qpid Messaging API</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Servers and tools</h3>
+
+            <ul>
+              <li><a href="/components/java-broker/index.html">Java broker</a></li>
+              <li><a href="/components/cpp-broker/index.html">C++ broker</a></li>
+              <li><a href="/components/dispatch-router/index.html">Dispatch router</a></li>
+            </ul>
+          </section>
+
+          <section>
+            <h3>Resources</h3>
+
+            <ul>
+              <li><a href="/dashboard.html">Dashboard</a></li>
+              <li><a href="https://cwiki.apache.org/confluence/display/qpid/Index">Wiki</a></li>
+              <li><a href="/resources.html">More resources</a></li>
+            </ul>
+          </section>
+        </div>
+      </div>
+
+      <div id="-search" class="panel" style="display: none;">
+        <form action="http://www.google.com/search" method="get">
+          <input type="hidden" name="sitesearch" value="qpid.apache.org"/>
+          <input type="text" name="q" maxlength="255" autofocus="autofocus" tabindex="1"/>
+          <button type="submit">Search</button>
+          <a href="/search.html">More ways to search</a>
+        </form>
+      </div>
+
+      <div id="-middle" class="panel">
+        <ul id="-path-navigation"><li><a href="/index.html">Home</a></li><li><a href="/proton/index.html">Qpid Proton</a></li><li>Security</li></ul>
+
+        <div id="-middle-content">
+          <h1 id="security">Security</h1>
+
+<section>
+
+<h2 id="proton">Proton</h2>
+
+<table>
+  <thead>
+    <tr>
+      <th>CVE-ID</th><th>Severity</th><th>Affected&nbsp;Versions</th><th>Fixed&nbsp;in&nbsp;Versions</th><th>Description</th>
+    </tr>
+  </thead>
+  <tbody>
+    <tr>
+      <td>CVE-2016-2166</td>
+      <td>Moderate</td>
+      <td>0.9 through 0.12.0 (inclusive)</td>
+      <td>0.12.1 and later</td>
+      <td>
+        Python bindings silently ignore request for amqps if SSL/TLS not supported. <a id="CVE_2016_2166_details_toggle" href="javascript:_toggleDiv({divId:'CVE_2016_2166_details', controlId:'CVE_2016_2166_details_toggle', showMore:'<small>show more</small>', showLess:'<small>show less</small>'});"><small>show more</small></a>
+        <div style="display:none;" id="CVE_2016_2166_details">
+          <p>Versions Affected: Apache Qpid Proton python API starting
+          at 0.9 up to and including version 0.12.0.</p>
+          <p>Description: Messaging applications using the Proton
+          Python API to provision an SSL/TLS encrypted TCP connection
+          may actually instantiate a non-encrypted connection without
+          notice if SSL support is unavailable.  This will result in
+          all messages being sent in the clear without the knowledge
+          of the user.<br/>  This issue affects those applications
+          that use the Proton Reactor Python API to create SSL/TLS
+          connections.  Specifically the proton.reactor.Connector,
+          proton.reactor.Container, and
+          proton.utils.BlockingConnection classes are vulnerable.
+          These classes can create an unencrypted connections if the
+          "amqps://" URL prefix is used.<br/>  The issue only occurs
+          if the installed Proton libraries do not support SSL.  This
+          would be the case if the libraries were built without SSL
+          support or the necessary SSL libraries are not present on
+          the system (e.g. OpenSSL in the case of *nix).<br/>  To
+          check whether or not the Python API provides SSL support,
+          use the following console command:<br/>python -c "import
+          proton; print('%s' % 'SSL present' if proton.SSL.present()
+          else 'SSL NOT AVAILBLE')"<br/>In addition, the issue can
+          only occur if both ends of the connection connect without
+          SSL.  This would be the case if the vulnerability is active
+          on both ends of the connection, or the non-affected endpoint
+          allows cleartext connections.</p>
+          <p>Resolution: Proton release 0.12.1 resolves this issue by
+          raising an SSLUnavailable exception when SSL is not
+          available and a SSL/TLS connection is requested via the
+          "amqps://" URL
+          prefix.<br/>A <a href="https://issues.apache.org/jira/browse/PROTON-1157">patch</a>
+          is also available.</p>
+          <p>References: <a href="https://issues.apache.org/jira/browse/PROTON-1157">PROTON-1157</a></p>
+      <p>Credit: This issue was discovered by M. Farrellee from Red Hat.</p>
+        </div>
+      </td>
+    </tr>
+  </tbody>
+</table>
+
+</section>
+
+
+          <hr/>
+
+          <ul id="-apache-navigation">
+            <li><a href="http://www.apache.org/">Apache</a></li>
+            <li><a href="http://www.apache.org/licenses/">License</a></li>
+            <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
+            <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
+            <li><a href="/security.html">Security</a></li>
+            <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
+          </ul>
+
+          <p id="-legal">
+            Apache Qpid, Messaging built on AMQP; Copyright &#169; 2015
+            The Apache Software Foundation; Licensed under
+            the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache
+            License, Version 2.0</a>; Apache Qpid, Qpid, Qpid Proton,
+            Proton, Apache, the Apache feather logo, and the Apache Qpid
+            project logo are trademarks of The Apache Software
+            Foundation; All other marks mentioned may be trademarks or
+            registered trademarks of their respective owners
+          </p>
+        </div>
+      </div>
+    </div>
+  </body>
+</html>

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/proton/submitting-patches.html
----------------------------------------------------------------------
diff --git a/content/proton/submitting-patches.html b/content/proton/submitting-patches.html
index c8a6a30..bdded2b 100644
--- a/content/proton/submitting-patches.html
+++ b/content/proton/submitting-patches.html
@@ -157,7 +157,7 @@ extraneous whitespace automatically.</p>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/index.html
----------------------------------------------------------------------
diff --git a/content/releases/index.html b/content/releases/index.html
index 5b15151..568eb11 100644
--- a/content/releases/index.html
+++ b/content/releases/index.html
@@ -198,7 +198,7 @@ the
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/AMQP-Compatibility.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/AMQP-Compatibility.html b/content/releases/qpid-0.26/cpp-broker/book/AMQP-Compatibility.html
index 4aeecbd..f211ead 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/AMQP-Compatibility.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/AMQP-Compatibility.html
@@ -515,7 +515,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/QpidInteroperabilityDocumentation-QpidInteroperabilityDocumentation.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/QpidInteroperabilityDocumentation-QpidInteroperabilityDocumentation.html b/content/releases/qpid-0.26/cpp-broker/book/QpidInteroperabilityDocumentation-QpidInteroperabilityDocumentation.html
index 2f2cab2..b38ad24 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/QpidInteroperabilityDocumentation-QpidInteroperabilityDocumentation.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/QpidInteroperabilityDocumentation-QpidInteroperabilityDocumentation.html
@@ -354,7 +354,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/Using-message-groups.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/Using-message-groups.html b/content/releases/qpid-0.26/cpp-broker/book/Using-message-groups.html
index 9684783..cbb8d45 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/Using-message-groups.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/Using-message-groups.html
@@ -278,7 +278,7 @@ qpidd --default-msg-group "EMPTY-GROUP"
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch01.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch01.html b/content/releases/qpid-0.26/cpp-broker/book/ch01.html
index f7a2769..2172969 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch01.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch01.html
@@ -669,7 +669,7 @@ self.assertEqual(rc.text, "OK")
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch01s02.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch01s02.html b/content/releases/qpid-0.26/cpp-broker/book/ch01s02.html
index c156ede..98b8927 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch01s02.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch01s02.html
@@ -292,7 +292,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch01s03.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch01s03.html b/content/releases/qpid-0.26/cpp-broker/book/ch01s03.html
index b9c3146..571dd4a 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch01s03.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch01s03.html
@@ -220,7 +220,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch01s06.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch01s06.html b/content/releases/qpid-0.26/cpp-broker/book/ch01s06.html
index 5745d28..9733c30 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch01s06.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch01s06.html
@@ -229,7 +229,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch02s02.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch02s02.html b/content/releases/qpid-0.26/cpp-broker/book/ch02s02.html
index 499136a..33e8f1f 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch02s02.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch02s02.html
@@ -708,7 +708,7 @@ https://github.com/apache/qpid-proton/blob/go1{/dir}/{file}#L{line}"/>
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/ch02s03.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/ch02s03.html b/content/releases/qpid-0.26/cpp-broker/book/ch02s03.html
index d60443f..b5ce3b8 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/ch02s03.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/ch02s03.html
@@ -826,7 +826,7 @@ sess.bindClass("org.apache.qpid.broker", "queue")
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Broker_Federation.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Broker_Federation.html b/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Broker_Federation.html
index 4252cba..3b427d1 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Broker_Federation.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Broker_Federation.html
@@ -442,7 +442,7 @@ localhost       10009   tcp          N     Waiting           Connection refused
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Security.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Security.html b/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Security.html
index bf9b954..b20deb6 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Security.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/chap-Messaging_User_Guide-Security.html
@@ -910,7 +910,7 @@ certutil -S -d ${CERT_DIR} -n ${NICKNAME} -s "CN=${NICKNAME}" -t "CT,," -x -f ${
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 

http://git-wip-us.apache.org/repos/asf/qpid-site/blob/6125fc40/content/releases/qpid-0.26/cpp-broker/book/chapter-Managing-CPP-Broker.html
----------------------------------------------------------------------
diff --git a/content/releases/qpid-0.26/cpp-broker/book/chapter-Managing-CPP-Broker.html b/content/releases/qpid-0.26/cpp-broker/book/chapter-Managing-CPP-Broker.html
index 9e1341f..a3853e8 100644
--- a/content/releases/qpid-0.26/cpp-broker/book/chapter-Managing-CPP-Broker.html
+++ b/content/releases/qpid-0.26/cpp-broker/book/chapter-Managing-CPP-Broker.html
@@ -585,7 +585,7 @@ For help with a command type: qpid-ha &lt;command&gt; --help
             <li><a href="http://www.apache.org/licenses/">License</a></li>
             <li><a href="http://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
             <li><a href="http://www.apache.org/foundation/thanks.html">Thanks!</a></li>
-            <li><a href="http://www.apache.org/security/">Security</a></li>
+            <li><a href="/security.html">Security</a></li>
             <li><a href="http://www.apache.org/"><img id="-apache-feather" width="48" height="14" src="" alt="Apache"/></a></li>
           </ul>
 


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@qpid.apache.org
For additional commands, e-mail: commits-help@qpid.apache.org


Mime
View raw message