You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache OFBiz 18.12.06 released - posted by Jacopo Cappellato <ja...@apache.org> on 2022/09/01 11:02:46 UTC, 0 replies.
- CVE-2022-37435: Apache ShenYu Admin Improper Privilege Management - posted by Zhang Yonglun <zh...@apache.org> on 2022/09/01 12:15:09 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking 9.2.0 released - posted by Sheng Wu <wu...@apache.org> on 2022/09/01 13:15:10 UTC, 0 replies.
- CVE-2022-38054: Apache Airflow: Session Fixation - posted by Jedidiah Cunningham <je...@apache.org> on 2022/09/02 03:53:55 UTC, 0 replies.
- CVE-2022-38170: Apache Airflow: Overly permissive umask for deamons - posted by Jedidiah Cunningham <je...@apache.org> on 2022/09/02 03:55:07 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 18.12 End-Of-Life (EOL) announcement - posted by Jacques Le Roux <jl...@apache.org> on 2022/09/02 05:56:04 UTC, 0 replies.
- Subject: Apache OFBiz - Server-Side Template Injection (CVE-2022-25813) - posted by Jacques Le Roux <jl...@apache.org> on 2022/09/02 06:17:27 UTC, 0 replies.
- Apache OFBiz - Java Deserialization via RMI Connection (CVE-2022-29063) - posted by Jacques Le Roux <jl...@apache.org> on 2022/09/02 06:25:08 UTC, 0 replies.
- Apache OFBiz - Unauth Path Traversal with file corruption (CVE-2022-25371) - posted by Jacques Le Roux <jl...@apache.org> on 2022/09/02 06:27:52 UTC, 3 replies.
- Apache OFBiz - Unauth Stored XSS (CVE-2022-25370) - posted by Jacques Le Roux <jl...@apache.org> on 2022/09/02 06:39:29 UTC, 0 replies.
- The Apache Weekly News Round-up: week ending 2 September 2022 - posted by Swapnil M Mane <sw...@apache.org> on 2022/09/02 12:23:45 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid Proton-J 0.34.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2022/09/02 17:49:04 UTC, 0 replies.
- [ANN] Apache ActiveMQ 5.17.2 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2022/09/03 06:10:36 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking Java Agent 8.12.0 released - posted by Sheng Wu <wu...@apache.org> on 2022/09/03 14:29:23 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX Ingress controller v1.5.0-rc1 released - posted by Jintao Zhang <zh...@apache.org> on 2022/09/05 06:51:50 UTC, 0 replies.
- CVE-2022-38369: Apache IoTDB: Login check vulnerability by session Id - posted by Haonan Hou <ha...@apache.org> on 2022/09/05 08:41:38 UTC, 0 replies.
- CVE-2022-38370: Apache IoTDB: No authorization of DatabaseConnectController in grafana-connector. - posted by Haonan Hou <ha...@apache.org> on 2022/09/05 08:42:49 UTC, 0 replies.
- [ANNOUNCE] Apache HBase 2.5.0 is now available for download - posted by Nick Dimiduk <nd...@apache.org> on 2022/09/05 10:15:06 UTC, 0 replies.
- [ANNOUNCE] Apache Linkis (Incubating) 1.2.0 available - posted by Zhen Wang <wa...@apache.org> on 2022/09/05 14:01:39 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 2.7.5 released - posted by Haiting Jiang <ji...@apache.org> on 2022/09/06 13:53:42 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi (Incubating) released 1.6.0-incubating - posted by Nicholas Jiang <ni...@apache.org> on 2022/09/06 15:54:00 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 15 released - posted by Geertjan Wielenga <ge...@apache.org> on 2022/09/07 06:51:07 UTC, 0 replies.
- [ANNOUNCE] Apache Pinot 0.11.0 release - posted by Xiang Fu <xi...@apache.org> on 2022/09/08 01:41:02 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 0.13.2 released - posted by Jialin Qiao <qi...@apache.org> on 2022/09/08 08:11:44 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 3.18.2 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2022/09/09 08:17:19 UTC, 0 replies.
- The Apache Weekly News Round-up: week ending 9 September 2022 - posted by Swapnil M Mane <sw...@apache.org> on 2022/09/09 14:29:22 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.5 Released - posted by Paul King <pa...@apache.org> on 2022/09/09 15:20:02 UTC, 0 replies.
- [ANNOUNCE] Apache Calcite 1.32.0 released - posted by Julian Hyde <jh...@apache.org> on 2022/09/10 22:22:36 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.16.10 released - posted by Julian Reschke <re...@apache.org> on 2022/09/11 05:56:59 UTC, 1 replies.
- CVE-2022-39135: Apache Calcite: potential XEE attacks - posted by Ruben Q L <ru...@apache.org> on 2022/09/11 08:03:22 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking Rover 0.3.0 Released - posted by han liu <li...@apache.org> on 2022/09/12 05:46:51 UTC, 0 replies.
- [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.3 - posted by Mark Thomas <ma...@apache.org> on 2022/09/12 20:06:41 UTC, 0 replies.
- [ANNOUNCE] Apache Tika 1.28.5 released - posted by Tim Allison <ta...@apache.org> on 2022/09/14 14:46:32 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 1.8.17 released - posted by Andreas Lehmkuehler <le...@apache.org> on 2022/09/15 17:35:09 UTC, 0 replies.
- [ANN] Apache Struts ver. 6.0.3 GA - posted by Lukasz Lenart <lu...@apache.org> on 2022/09/16 06:35:17 UTC, 0 replies.
- The Apache Weekly News Round-up: week ending 16 September 2022 - posted by Swapnil M Mane <sw...@apache.org> on 2022/09/16 08:52:14 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking Could on Kubernetes 0.7.0 Released - posted by Ye Cao <da...@apache.org> on 2022/09/16 16:23:45 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking Cloud on Kubernetes 0.7.0 Released - posted by Ye Cao <da...@apache.org> on 2022/09/17 01:07:15 UTC, 0 replies.
- [ANNOUNCE] Apache POI 5.2.3 released - posted by PJ Fanning <fa...@apache.org> on 2022/09/17 10:53:42 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j 2.19.0 released - posted by Ralph Goers <rg...@apache.org> on 2022/09/17 20:35:48 UTC, 0 replies.
- [ANNOUNCE] Apache Creadur RAT 0.15 is released - posted by "P. Ottlinger" <po...@apache.org> on 2022/09/17 22:26:33 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 3.0.13 Released - posted by Paul King <pa...@apache.org> on 2022/09/18 08:58:00 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.4.0 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2022/09/19 08:52:13 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 2.8.4 released - posted by Yunze Xu <xy...@apache.org> on 2022/09/19 08:59:41 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 2.8.2 - posted by Manikumar <ma...@apache.org> on 2022/09/19 15:46:55 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.0.2 - posted by Manikumar <ma...@apache.org> on 2022/09/19 15:47:44 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.1.2 - posted by Manikumar <ma...@apache.org> on 2022/09/19 15:48:51 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.2.3 - posted by Manikumar <ma...@apache.org> on 2022/09/19 15:49:52 UTC, 0 replies.
- CVE-2022-34917: Unauthenticated clients may cause OutOfMemoryError on Apache Kafka Brokers - posted by Manikumar <ma...@apache.org> on 2022/09/19 15:53:08 UTC, 0 replies.
- CVE-2022-28220: STARTTLS command injection in Apache JAMES - posted by Benoit Tellier <bt...@apache.org> on 2022/09/19 23:13:25 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking Kubernetes 4.3.0 is available - posted by kezhenxu94 <ke...@apache.org> on 2022/09/20 06:42:50 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking CLI 0.11.0 Released - posted by kezhenxu94 <ke...@apache.org> on 2022/09/20 06:54:40 UTC, 0 replies.
- [ANNOUNCE] Release Apache InLong 1.3.0 - posted by Zirui Sting <zi...@apache.org> on 2022/09/20 08:07:23 UTC, 0 replies.
- [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.4 - posted by Mark Thomas <ma...@apache.org> on 2022/09/20 14:21:14 UTC, 0 replies.
- CVE-2022-40604: Apache Airflow: Format String Vulnerability - posted by Jedidiah Cunningham <je...@apache.org> on 2022/09/20 18:53:42 UTC, 0 replies.
- CVE-2022-40754: Apache Airflow: Open Redirect - posted by Jedidiah Cunningham <je...@apache.org> on 2022/09/20 18:55:11 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 1.7.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2022/09/21 10:59:57 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 2.1.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2022/09/21 11:02:21 UTC, 0 replies.
- CVE-2022-40705: Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP - posted by Arnout Engelen <en...@apache.org> on 2022/09/22 08:07:35 UTC, 0 replies.
- CVE-2022-40955: Deserialization attack in Apache InLong prior to version 1.3.0 allows RCE via JDBC - posted by Arnout Engelen <en...@apache.org> on 2022/09/22 15:15:07 UTC, 0 replies.
- CVE-2022-24280: Apache Pulsar Proxy target broker address isn't validated - posted by Lari Hotari <lh...@apache.org> on 2022/09/22 17:31:53 UTC, 0 replies.
- CVE-2022-33681: Apache Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM - posted by Michael Marshall <mm...@apache.org> on 2022/09/22 17:34:52 UTC, 0 replies.
- CVE-2022-33682: Apache Pulsar: Disabled Hostname Verification makes Brokers, Proxies vulnerable to MITM attack - posted by Michael Marshall <mm...@apache.org> on 2022/09/22 17:44:51 UTC, 0 replies.
- CVE-2022-33683: Apache Pulsar: Disabled Certificate Validation makes Broker, Proxy Admin Clients vulnerable to MITM attack - posted by Michael Marshall <mm...@apache.org> on 2022/09/22 17:45:37 UTC, 0 replies.
- The Apache Weekly News Round-up: week ending 23 September 2022 - posted by Swapnil M Mane <sw...@apache.org> on 2022/09/23 19:07:29 UTC, 0 replies.
- [ANNOUNCE] Apache Allura 1.14.0 released - posted by Dave Brondsema <br...@apache.org> on 2022/09/23 21:18:10 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.0 (stable) available - posted by Mark Thomas <ma...@apache.org> on 2022/09/26 14:43:40 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.67 available - posted by Rémy Maucherat <re...@apache.org> on 2022/09/26 19:01:17 UTC, 0 replies.
- [ANNOUCE] Apache CloudStack 4.17.1.0 LTS Release - posted by Abhishek Kumar <sh...@apache.org> on 2022/09/27 07:32:49 UTC, 0 replies.
- [ANN] Apache Tomcat 10.0.26 available - posted by Mark Thomas <ma...@apache.org> on 2022/09/27 20:36:05 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid proton-dotnet 1.0.0-M4 released - posted by Timothy Bish <ta...@apache.org> on 2022/09/27 21:44:38 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid ProtonJ2 1.0.0-M9 released - posted by Timothy Bish <ta...@apache.org> on 2022/09/27 21:46:46 UTC, 0 replies.
- [SECURITY] CVE-2021-43980 Apache Tomcat - Information Disclosure - posted by Mark Thomas <ma...@apache.org> on 2022/09/28 13:01:06 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX 3.0.0-beta has been released - posted by Zexuan Luo <sp...@apache.org> on 2022/09/29 07:37:09 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 2.0.27 released - posted by Andreas Lehmkuehler <le...@apache.org> on 2022/09/29 18:09:31 UTC, 0 replies.
- [ANNOUNCEMENT] Apache Commons Text 1.10.0 - posted by Gary Gregory <gg...@apache.org> on 2022/09/30 02:33:00 UTC, 0 replies.
- The Apache Weekly News Round-up: week ending 30 September 2022 - posted by Swapnil M Mane <sw...@apache.org> on 2022/09/30 16:24:48 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.4.1 Released - posted by Jedidiah Cunningham <je...@apache.org> on 2022/09/30 21:03:46 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 9.4.0 released - posted by Michael Sokolov <so...@apache.org> on 2022/09/30 22:17:10 UTC, 0 replies.