You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache IoTDB 1.3.2 released - posted by Haonan Hou <ha...@apache.org> on 2024/07/01 03:03:56 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.7.1 - posted by Igor Soarez <so...@apache.org> on 2024/07/01 09:25:10 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.60 Released - posted by covener <co...@apache.org> on 2024/07/01 12:33:13 UTC, 0 replies.
- CVE-2024-36387: Apache HTTP Server: DoS by Null pointer in websocket over HTTP/2 - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:40:54 UTC, 0 replies.
- CVE-2024-38472: Apache HTTP Server on WIndows UNC SSRF - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:15 UTC, 0 replies.
- CVE-2024-38473: Apache HTTP Server proxy encoding problem - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:26 UTC, 0 replies.
- CVE-2024-38474: Apache HTTP Server weakness with encoded question marks in backreferences - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:41:40 UTC, 0 replies.
- CVE-2024-38475: Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:10 UTC, 0 replies.
- CVE-2024-38476: Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:30 UTC, 0 replies.
- CVE-2024-38477: Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:42:46 UTC, 0 replies.
- CVE-2024-39573: Apache HTTP Server: mod_rewrite proxy handler substitution - posted by Eric Covener <co...@apache.org> on 2024/07/01 12:43:00 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.0.0-M4 Released - posted by David Handermann <ex...@apache.org> on 2024/07/01 19:26:47 UTC, 0 replies.
- [ANNOUNCE] Apache POI 5.3.0 release - posted by PJ Fanning <fa...@apache.org> on 2024/07/02 12:24:18 UTC, 0 replies.
- [ANNOUNCE] Release Apache OpenDAL 0.47.2 - posted by Xuanwo <xu...@apache.org> on 2024/07/03 05:20:13 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.2.5 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2024/07/03 14:08:55 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.61 Released - posted by covener <co...@apache.org> on 2024/07/03 15:07:21 UTC, 0 replies.
- CVE-2024-39884: Apache HTTP Server: source code disclosure with handlers configured via AddType - posted by Eric Covener <co...@apache.org> on 2024/07/03 15:09:30 UTC, 0 replies.
- [SECURITY] CVE-2024-34750 Apache Tomcat - Denial of Service - posted by Mark Thomas <ma...@apache.org> on 2024/07/03 19:25:54 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Logging 1.3.3 - posted by Gary Gregory <gg...@apache.org> on 2024/07/04 12:15:07 UTC, 0 replies.
- [ANNOUNCE] Apache ServiceComb Java Chassis version 2.8.18 Released - posted by liubao <li...@apache.org> on 2024/07/04 12:50:23 UTC, 0 replies.
- [ANNOUNCE] Apache ServiceComb Java Chassis version 3.2.0 Released - posted by liubao <li...@apache.org> on 2024/07/04 12:50:50 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 02, 2024 are released - posted by Jarek Potiuk <po...@apache.org> on 2024/07/04 18:27:53 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 13 released - posted by David Li <li...@apache.org> on 2024/07/05 03:25:38 UTC, 0 replies.
- [ANNOUNCE] Apache CloudStack LTS Security Releases 4.18.2.1 and 4.19.0.2 - posted by Abhishek Kumar <sh...@apache.org> on 2024/07/05 13:10:06 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.0-M22 (beta) available - posted by Mark Thomas <ma...@apache.org> on 2024/07/05 19:15:11 UTC, 0 replies.
- [ANNOUNCE] Release Apache OpenDAL 0.47.3 - posted by Xuanwo <xu...@apache.org> on 2024/07/07 01:31:42 UTC, 0 replies.
- [ANN] Apache Causeway version 2.1.0 and 3.1.0 Released - posted by Dan Haywood <da...@apache.org> on 2024/07/07 23:12:36 UTC, 0 replies.
- CVE-2024-37389: Apache NiFi: Improper Neutralization of Input in Parameter Context Description - posted by David Handermann <ex...@apache.org> on 2024/07/08 03:25:03 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.11.1 released - posted by Baodi Shi <ba...@apache.org> on 2024/07/08 08:47:50 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.91 available - posted by Rémy Maucherat <re...@apache.org> on 2024/07/08 09:55:32 UTC, 0 replies.
- [ANNOUNCE] Apache Bigtop 3.3.0 released - posted by Masatake Iwasaki <iw...@apache.org> on 2024/07/08 12:50:28 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 1.27.0 Released - posted by David Handermann <ex...@apache.org> on 2024/07/08 23:14:42 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.66.0 released - posted by Julian Reschke <re...@apache.org> on 2024/07/11 04:21:08 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Connectors 1.1.0-M1 released - posted by PJ Fanning <fa...@apache.org> on 2024/07/12 12:06:13 UTC, 0 replies.
- CVE-2024-36522: Apache Wicket: Remote code execution via XSLT injection - posted by Martin Tzvetanov Grigorov <mg...@apache.org> on 2024/07/12 12:12:11 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 09, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/07/12 12:42:53 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.26 Available - posted by Christopher Schultz <sc...@apache.org> on 2024/07/12 15:51:00 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.7.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2024/07/13 14:32:19 UTC, 0 replies.
- CVE-2023-41916: Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading - posted by Heping Wang <pe...@apache.org> on 2024/07/13 14:52:59 UTC, 0 replies.
- CVE-2023-46801: Apache Linkis DataSource: Remote code execution vulnerability in apache Linkis 1.4.0 - posted by Heping Wang <pe...@apache.org> on 2024/07/13 14:58:25 UTC, 0 replies.
- CVE-2023-49566: Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability - posted by Heping Wang <pe...@apache.org> on 2024/07/13 15:01:02 UTC, 0 replies.
- [ANNOUNCE] Release Apache SkyWalking Client JS version 0.12.0 - posted by xue fan <qi...@apache.org> on 2024/07/15 02:47:30 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 12, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/07/15 11:45:43 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Codec 1.17.1 - posted by Gary Gregory <gg...@apache.org> on 2024/07/15 22:39:18 UTC, 0 replies.
- CVE-2023-52290: Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability - posted by Huajie Wang <be...@apache.org> on 2024/07/15 23:05:06 UTC, 0 replies.
- [ANNOUNCE] Apache Linkis 1.6.0 released - posted by peacewong <pe...@apache.org> on 2024/07/16 06:52:16 UTC, 0 replies.
- [ANNOUNCE] Apache Uniffle (Incubating) 0.9.0 available - posted by Enrico Minack <en...@apache.org> on 2024/07/16 08:43:19 UTC, 0 replies.
- CVE-2024-39887: Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions - posted by Daniel Gaspar <dp...@apache.org> on 2024/07/16 09:01:50 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.9.3 Released - posted by Utkarsh Sharma <ut...@apache.org> on 2024/07/16 11:07:58 UTC, 0 replies.
- CVE-2024-39863: Apache Airflow: Potential XSS Vulnerability - posted by Ephraim Anierobi <ep...@apache.org> on 2024/07/16 12:06:38 UTC, 0 replies.
- CVE-2024-39877: Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler - posted by Ephraim Anierobi <ep...@apache.org> on 2024/07/16 12:08:55 UTC, 0 replies.
- [ANNOUNCE] Apache Commons RNG 1.6 released - posted by Alex Herbert <ah...@apache.org> on 2024/07/16 12:26:13 UTC, 0 replies.
- [ANNOUNCE] Apache StreamPipes 0.95.1 - posted by Dominik Riemer <ri...@apache.org> on 2024/07/16 18:57:50 UTC, 0 replies.
- CVE-2024-30471: Apache StreamPipes: Potential creation of multiple identical accounts - posted by Dominik Riemer <ri...@apache.org> on 2024/07/16 19:00:49 UTC, 0 replies.
- CVE-2024-31411: Apache StreamPipes: Potential remote code execution (RCE) via file upload - posted by Dominik Riemer <ri...@apache.org> on 2024/07/16 19:01:26 UTC, 0 replies.
- CVE-2024-31979: Apache StreamPipes: Possibility of SSRF in pipeline element installation process - posted by Dominik Riemer <ri...@apache.org> on 2024/07/16 19:02:32 UTC, 0 replies.
- [ANNOUNCE] Apache Tika 3.0.0-BETA2 released - posted by Tim Allison <ta...@apache.org> on 2024/07/16 20:02:04 UTC, 0 replies.
- CVE-2023-52291: Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution - posted by Huajie Wang <be...@apache.org> on 2024/07/17 05:29:22 UTC, 0 replies.
- CVE-2024-29737: Apache StreamPark (incubating): maven build params could trigger remote command execution - posted by Huajie Wang <be...@apache.org> on 2024/07/17 06:57:48 UTC, 0 replies.
- CVE-2024-29120: Apache StreamPark: Information leakage vulnerability - posted by Huajie Wang <be...@apache.org> on 2024/07/17 14:54:39 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.62 Released - posted by covener <co...@apache.org> on 2024/07/17 18:21:31 UTC, 0 replies.
- CVE-2024-40725: Apache HTTP Server: source code disclosure with handlers configured via AddType - posted by Eric Covener <co...@apache.org> on 2024/07/17 18:23:15 UTC, 0 replies.
- CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows - posted by Eric Covener <co...@apache.org> on 2024/07/17 18:25:03 UTC, 0 replies.
- CVE-2024-29178: Apache StreamPark: FreeMarker SSTI RCE Vulnerability - posted by Huajie Wang <be...@apache.org> on 2024/07/18 10:11:22 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Lang Version 3.15.0 - posted by Gary Gregory <gg...@apache.org> on 2024/07/18 14:43:24 UTC, 0 replies.
- CVE-2024-29736: Apache CXF: SSRF vulnerability via WADL stylesheet parameter - posted by Colm O hEigeartaigh <co...@apache.org> on 2024/07/18 15:47:08 UTC, 0 replies.
- CVE-2024-32007: Apache CXF Denial of Service vulnerability in JOSE - posted by Colm O hEigeartaigh <co...@apache.org> on 2024/07/18 15:50:13 UTC, 0 replies.
- CVE-2024-41172: Unrestricted memory consumption in CXF HTTP clients - posted by Colm O hEigeartaigh <co...@apache.org> on 2024/07/18 15:52:55 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 17.0.0 released - posted by Raúl Cumplido <ra...@apache.org> on 2024/07/19 09:14:34 UTC, 0 replies.
- [ANNOUNCE] Apache CloudStack CVE-2024-41107: SAML Signature Exclusion - posted by Abhishek Kumar <sh...@apache.org> on 2024/07/19 10:08:05 UTC, 0 replies.
- CVE-2024-41107: Apache CloudStack: SAML Signature Exclusion - posted by Rohit Yadav <ro...@apache.org> on 2024/07/19 10:11:23 UTC, 0 replies.
- [ANNOUNCE] Apache bRPC 1.10.0 released - posted by Xiaofeng <xi...@apache.org> on 2024/07/19 14:39:50 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid protonj2 1.0.0-M21 released - posted by Timothy Bish <ta...@apache.org> on 2024/07/19 15:37:38 UTC, 0 replies.
- Apache Submarine is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2024/07/20 19:48:41 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi Shaded released 0.4.1 - posted by Cheng Pan <ch...@apache.org> on 2024/07/22 03:34:25 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Go Client 0.13.0 released - posted by Zike Yang <zi...@apache.org> on 2024/07/22 03:44:39 UTC, 0 replies.
- CVE-2024-23321: Apache RocketMQ: Unauthorized Exposure of Sensitive Data - posted by Rongtong Jin <ji...@apache.org> on 2024/07/22 08:06:59 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.8 - posted by Francesco Chicchiriccò <il...@apache.org> on 2024/07/22 09:27:13 UTC, 0 replies.
- CVE-2024-34457: Apache StreamPark IDOR Vulnerability - posted by Huajie Wang <be...@apache.org> on 2024/07/22 09:33:34 UTC, 0 replies.
- CVE-2024-38503: Apache Syncope: HTML tags can be injected into Console or Enduser text fields - posted by Francesco Chicchiriccò <il...@apache.org> on 2024/07/22 09:35:35 UTC, 0 replies.
- CVE-2024-29070: Apache StreamPark: session not invalidated after logout - posted by Huajie Wang <be...@apache.org> on 2024/07/22 15:25:08 UTC, 0 replies.
- [ANN] Apache TomEE 10.0.0-M2 - posted by Richard Zowalla <rz...@apache.org> on 2024/07/23 07:00:44 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.23.0-beta released - posted by Julian Reschke <re...@apache.org> on 2024/07/23 11:14:18 UTC, 0 replies.
- [ANNOUNCE] Apache BVal 3.0.1 - posted by Markus Jung <ju...@apache.org> on 2024/07/23 11:40:54 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Persistence Cassandra 1.1.0-M1 released - posted by PJ Fanning <fa...@apache.org> on 2024/07/23 11:44:27 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.9.2 is available - posted by Fu Chen <fc...@apache.org> on 2024/07/23 12:59:18 UTC, 0 replies.
- CVE-2024-41178: Apache Arrow Rust Object Store: AWS WebIdentityToken exposure in log files - posted by Andrew Lamb <al...@apache.org> on 2024/07/23 16:21:24 UTC, 0 replies.
- CVE-2024-39676: Apache Pinot: Unauthorized endpoint exposed sensitive information - posted by Yupeng Fu <yu...@apache.org> on 2024/07/23 20:11:53 UTC, 0 replies.
- Subject: [ANNOUNCE] Apache Storm 2.6.3 Released - posted by Rui Abreu <ra...@apache.org> on 2024/07/24 02:13:12 UTC, 0 replies.
- CVE-2023-48362: Apache Drill: XXE Vulnerability in XML Format Reader - posted by James Turton <dz...@apache.org> on 2024/07/24 04:13:49 UTC, 0 replies.
- [ANNOUNCE] Apache Commons BCEL Version 6.10.0 - posted by Gary Gregory <gg...@apache.org> on 2024/07/24 12:06:29 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Helm Chart version 1.15.0 Released - posted by Jedidiah Cunningham <je...@apache.org> on 2024/07/24 14:12:21 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 2.0.32 released - posted by Andreas Lehmkühler <le...@apache.org> on 2024/07/24 16:00:44 UTC, 0 replies.
- [ANN] Apache Tomcat Native 2.0.8 released - posted by Mark Thomas <ma...@apache.org> on 2024/07/24 17:54:35 UTC, 0 replies.
- [ANN] Apache Tomcat Native 1.3.1 released - posted by Mark Thomas <ma...@apache.org> on 2024/07/24 17:54:38 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 5.18.5 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2024/07/25 07:04:08 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 21, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/07/25 14:32:40 UTC, 0 replies.
- [ANNOUNCE] Apache Iceberg release 1.6.0 - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2024/07/25 15:04:00 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 9.2.5 and 8.1.11 are released - posted by Bryan Call <bc...@apache.org> on 2024/07/25 15:48:46 UTC, 0 replies.
- CVE-2024-25090: Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode - posted by "David M. Johnson" <sn...@apache.org> on 2024/07/25 21:46:28 UTC, 0 replies.
- Apache HAWQ is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2024/07/28 20:50:53 UTC, 0 replies.
- Apache Bloodhound is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2024/07/28 20:52:59 UTC, 0 replies.
- [ANNOUNCE] Apache Celeborn 0.4.2 available - posted by Fu Chen <fc...@apache.org> on 2024/07/29 10:11:55 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.8.0 - posted by Josep Prat <jl...@apache.org> on 2024/07/29 17:30:29 UTC, 1 replies.
- CVE-2023-48396: Apache SeaTunnel Web: Authentication bypass - posted by Jun Gao <ga...@apache.org> on 2024/07/30 07:48:43 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 28, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/07/31 14:22:40 UTC, 0 replies.