Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
SUSE: 2022:2338-1 important: apache2
An update that fixes 7 vulnerabilities is now available.
Fedora 36: golang-github-apache-beam-2 2022-fae3ecee19
Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191, CVE-2022-29526, CVE-2022-30629 Rebuild to mitigate CVE-2022-21698 (rhbz#2067400). --…
SUSE: 2022:2101-1 important: apache2
An update that fixes 7 vulnerabilities is now available.
SUSE: 2022:2099-1 important: apache2
An update that fixes 7 vulnerabilities is now available.
SUSE: 2022:1524-1 moderate: apache2-mod_auth_mell
An update that fixes one vulnerability is now available.
Mageia 2022-0009: osgi-core/apache-commons-compress security upda
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used…
Microsoft Warns of Continued Attacks Exploiting Apache Log4j Vulnerabilities
Microsoft is warning of continuing attempts by nation-state adversaries and commodity attackers to take advantage ofsecurity vulnerabilitiesuncovered in the Lo…
Apache Log4j Vulnerability ' Log4Shell ' Widely Under Active Attack
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
Apache Log4j Vulnerability — Log4Shell — Widely Under Active Attack
Threat actors are actively weaponizing unpatched servers affected by the newly identified "Log4Shell" vulnerability in Log4j to install cryptocurrency miners, …
Mageia 2021-0461: apache security upda
The updated packages fix a security vulnerabilities: While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processi…
Mageia 2021-0452: apache-mod_auth_openidc security upda
In versions prior to 2.4.9, `oidc_validate_redirect_url()` does not parse URLs the same way as most browsers do. As a result, this function can be bypassed and…
Mageia 2021-0439: apache security upda
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. (CVE-2021-33…
openSUSE: 2021:1277-1 moderate: apache2-mod_auth_openi
An update that fixes four vulnerabilities is now available.
openSUSE: 2021:3020-1 moderate: apache2-mod_auth_openi
An update that fixes four vulnerabilities is now available.
openSUSE: 2021:1115-1 important: apache-commons-compre
An update that fixes four vulnerabilities is now available.
openSUSE: 2021:2612-1 important: apache-commons-compre
An update that fixes four vulnerabilities is now available.
Mageia 2021-0280: apache-mod_auth_openidc security upda
mod_auth_openidc 2.4.0 to 2.4.7 allows a remote attacker to cause a denial-of- service (DoS) condition via unspecified vectors (CVE-2021-20718). References: - …
openSUSE: 2021:0605-1 moderate: apache-commons-
An update that fixes one vulnerability is now available.
openSUSE: 2020:0376-1: moderate: apache2-mod_auth_openi
An update that fixes one vulnerability is now available.
SUSE: 2020:0705-1 moderate: apache2-mod_auth_openi
An update that fixes one vulnerability is now available.
SUSE: 2020:0706-1 moderate: apache2-mod_auth_openi
An update that fixes one vulnerability is now available.
Mageia 2020-0129: apache-mod_auth_openidc security upda
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.1. An open redirect issue exists in URLs with a sl…
Debian LTS: DLA-2065-1: apache-log4j1.2 security upda
Included in Log4j 1.2, a logging library for Java, is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to re…
SUSE: 2020:14266-1 moderate: apache2-mod_pe
An update that fixes one vulnerability is now available.