Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Gentoo: GLSA-202107-32: Apache Thrift: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Apache Thrift, the worst of which could result in a Denial of Service condition.
Debian LTS: DLA-2706-1: apache2 security upda
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
Debian: DSA-4937-1: apache2 security upda
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition the implementation of the MergeSlashes …
Ubuntu 4994-2: Apache HTTP Server vulnerabiliti
Several security issues were fixed in Apache HTTP Server.
Ubuntu 4994-1: Apache HTTP Server vulnerabiliti
Several security issues were fixed in Apache HTTP Server.
Apache SpamAssassin 3.4.6 Release Fixes Two Potentially Aggravating Bu
On April 12, 2021, the Apache SpamAssassin Project announced the release of Apache SpamAssassin Version 3.4.6 mitigating two small but potentially annoying bug…
Critical RCE Vulnerability Found in Apache OFBiz ERP Software'Patch Now
The Apache Software Foundation on Friday addressed a high severity vulnerability in Apache OFBiz that could have allowed an unauthenticated adversary to remote…
Ubuntu 4564-1: Apache Tika vulnerabiliti
Apache Tika could be made to crash if it opened a specially crafted file.
Ubuntu 4496-1: Apache XML-RPC vulnerabili
Apache XML-RPC could be made to execute arbitrary code if it received specially crafted data by a malicious XML-RPC server.
Ubuntu 4495-1: Apache Log4j vulnerabili
Apache Log4j could be made to remotely execute arbitrary code if it received specially crafted log data.
Google Researcher Reported 3 Flaws in Apache Web Server Software
If your web-server runs on Apache, you should immediately install the latest available version of the server application to prevent hackers from taking unautho…
Mageia 2020-0327: apache security upda
Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the serv…
Ubuntu 4458-1: Apache HTTP Server vulnerabiliti
Several security issues were fixed in Apache HTTP Server.
Critical Apache Guacamole Flaws Put Remote Desktops at Risk of Hacking
A new research has uncovered multiple critical reverse RDP vulnerabilities in Apache Guacamole, a popular remote desktop application used by system administrat…
Ubuntu 4380-1: Apache Ant vulnerabili
Apache Ant could leak sensitive information or be made to run programs as your login.
Debian: DSA-4686-1: apache-log4j1.2 security upda
It was discovered that the SocketServer class included in apache-log4j1.2, a logging library for java, is vulnerable to deserialization of untrusted data. An a…
ArchLinux: 202004-14: apache: multiple issuesArchLinux: 202004-14: apache: multiple issu
The package apache before version 2.4.43-1 is vulnerable to multiple issues including information disclosure and open redirect.
RedHat: RHSA-2020-1336:01 Moderate: Red Hat JBoss Core Services Apache HT
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 2 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available. Red Hat Product Securit…
Gentoo: GLSA-202003-43: Apache Tomcat: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Apache Tomcat, the worst of which could lead to arbitrary code execution.
Debian LTS: DLA-2130-1: libapache2-mod-auth-openidc securi
An issue has been found in libapache2-mod-auth-openidc, an OpenID Connect authentication module for Apache. Due to insufficient validatation of URLs an Open Re…
GhostCat: New High-Risk Vulnerability Affects Servers Running Apache Tomcat
If your web server is running on Apache Tomcat, you should immediately install the latest available version of the server application to prevent hackers from t…
Ubuntu 4259-1: Apache Solr vulnerabili
Apache Solr could be made to run programs if it received specially crafted network traffic.
RedHat: RHSA-2020-0251:01 Low: Red Hat JBoss Core Services Apache HT
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 1 zip release for RHEL 6, RHEL 7 and Microsoft Windows is available. Red Hat Product Securit…
SciLinux: SLSA-2020-0194-1 Important: apache-commons-beanutils on SL7.x (noarc
apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) SL7 noarch apache-commons-beanutils-1.8.3-15.…