You are viewing a plain text version of this content. The canonical link for it is here.
- [ANN] Apache Maven 4.0.0-beta-4 released - posted by Tamás Cservenák <cs...@apache.org> on 2024/09/02 12:21:08 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 18.12.16 released - posted by Jacopo Cappellato <ja...@apache.org> on 2024/09/03 15:26:23 UTC, 0 replies.
- CVE-2024-45195: Apache OFBiz: Confused controller-view authorization logic (forced browsing) - posted by Jacques Le Roux <jl...@apache.org> on 2024/09/03 17:05:34 UTC, 0 replies.
- CVE-2024-45507: Apache OFBiz: Prevent use of URLs in files when loading them from Java or Groovy, leading to a RCE - posted by Jacques Le Roux <jl...@apache.org> on 2024/09/03 17:05:47 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.1.0 released - posted by PJ Fanning <fa...@apache.org> on 2024/09/03 21:22:30 UTC, 0 replies.
- Subject: [ANNOUNCE] Apache Storm 2.6.4 Released - posted by Rui Abreu <ra...@apache.org> on 2024/09/03 23:31:37 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 14 released - posted by David Li <li...@apache.org> on 2024/09/05 08:08:21 UTC, 0 replies.
- [ANNOUNCE] Apache Flink CDC 3.2.0 released - posted by Qingsheng Ren <re...@apache.org> on 2024/09/05 08:19:40 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client C++ 3.6.0 released - posted by Baodi Shi <ba...@apache.org> on 2024/09/06 07:16:02 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.10.1 Released - posted by Utkarsh Sharma <ut...@apache.org> on 2024/09/06 11:18:04 UTC, 0 replies.
- CVE-2024-45498: Apache Airflow: Command Injection in an example DAG - posted by Ephraim Anierobi <ep...@apache.org> on 2024/09/06 16:43:56 UTC, 0 replies.
- CVE-2024-45034: Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes - posted by Ephraim Anierobi <ep...@apache.org> on 2024/09/06 16:45:30 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.24.0` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2024/09/06 22:07:12 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 9.7.0 released - posted by Anshum Gupta <an...@apache.org> on 2024/09/09 23:20:15 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Projections 1.1.0-M1 released - posted by PJ Fanning <fa...@apache.org> on 2024/09/10 12:12:06 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.0-M25 (beta) available - posted by Mark Thomas <ma...@apache.org> on 2024/09/11 06:27:02 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.94 available - posted by Rémy Maucherat <re...@apache.org> on 2024/09/11 09:05:17 UTC, 0 replies.
- CVE-2024-22399: Apache Seata: Remote Code Execution vulnerability via Hessian Deserialization in Apache Seata Server - posted by Min Ji <ji...@apache.org> on 2024/09/11 12:11:32 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.29 Available - posted by Christopher Schultz <sc...@apache.org> on 2024/09/11 12:31:37 UTC, 0 replies.
- [ANNOUNCE] Beam 2.59.0 Released - posted by Robert Burke <lo...@apache.org> on 2024/09/11 23:02:30 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.3 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2024/09/12 14:39:27 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.22.21 released - posted by Julian Reschke <re...@apache.org> on 2024/09/12 14:57:19 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.23 Released - posted by Paul King <pa...@apache.org> on 2024/09/12 15:16:55 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.0-alpha-10 Released - posted by Paul King <pa...@apache.org> on 2024/09/12 15:32:08 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.12.0 released - posted by Baodi Shi <ba...@apache.org> on 2024/09/13 08:02:43 UTC, 0 replies.
- [ANN] Apache Tomcat: HTTP/2 regression in 11.0.0-M25, 10.1.29, 9.0.94 - posted by Mark Thomas <ma...@apache.org> on 2024/09/13 12:55:14 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.1.1 released - posted by Arnout Engelen <en...@apache.org> on 2024/09/14 14:34:57 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.8.0 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2024/09/15 18:06:51 UTC, 0 replies.
- [ANNOUNCE] Apache log4net 3.0.0 released - posted by Jan Friedrich <fr...@apache.org> on 2024/09/15 19:34:48 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.0-M26 (beta) available - posted by Mark Thomas <ma...@apache.org> on 2024/09/16 19:19:12 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.30 Available - posted by Christopher Schultz <sc...@apache.org> on 2024/09/17 11:38:08 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.95 available - posted by Rémy Maucherat <re...@apache.org> on 2024/09/17 11:54:19 UTC, 0 replies.
- CVE-2024-45384: Apache Druid: Padding oracle in druid-pac4j extension that allows an attacker to manipulate a pac4j session cookie via Padding Oracle Attack - posted by Karan Kumar <ka...@apache.org> on 2024/09/17 17:52:08 UTC, 0 replies.
- CVE-2024-45537: Apache Druid: Users can provide MySQL JDBC properties not on allow list - posted by Karan Kumar <ka...@apache.org> on 2024/09/17 17:58:30 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Persistence JDBC 1.1.0 released - posted by PJ Fanning <fa...@apache.org> on 2024/09/18 17:42:05 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 23 released - posted by Eric Barboni <sk...@apache.org> on 2024/09/20 12:22:46 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid protonj2 1.0.0-M22 released - posted by Timothy Bish <ta...@apache.org> on 2024/09/20 14:41:01 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.10.2 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2024/09/20 22:59:29 UTC, 0 replies.
- CVE-2024-42323: Apache HertzBeat: RCE by snakeYaml deser load malicious xml - posted by Chao Gong <go...@apache.org> on 2024/09/21 02:27:45 UTC, 0 replies.
- [ANNOUNCE] Apache YuniKorn v1.6.0 released - posted by Wilfred Spiegelenburg <wi...@apache.org> on 2024/09/23 01:28:30 UTC, 0 replies.
- [ANNOUNCE] Apache Answer(Incubating) v1.4.0 available - posted by Robin Ren <ro...@apache.org> on 2024/09/23 03:19:28 UTC, 0 replies.
- [ANNOUNCE] Apache Zeppelin 0.11.2 available - posted by Jongyoul Lee <jo...@apache.org> on 2024/09/23 03:27:34 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Client 5.4 GA Released - posted by Oleg Kalnichevski <ol...@apache.org> on 2024/09/23 07:30:08 UTC, 0 replies.
- [ANNOUNCE] Apache StormCrawler (Incubating) 3.1.0 released - posted by Richard Zowalla <rz...@apache.org> on 2024/09/23 07:36:36 UTC, 0 replies.
- [ANN] Apache OpenJPA 4.0.1 - posted by Francesco Chicchiriccò <il...@apache.org> on 2024/09/23 09:57:42 UTC, 0 replies.
- [SECURITY] CVE-2024-46544 Apache mod_jk - Information Disclosure / Denial of Service - posted by Mark Thomas <ma...@apache.org> on 2024/09/23 10:41:08 UTC, 0 replies.
- [SECURITY] CVE-2024-38286 Apache Tomcat - Denial of Service - posted by Mark Thomas <ma...@apache.org> on 2024/09/23 12:54:06 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi API 2.0.0 Released - posted by David Handermann <ex...@apache.org> on 2024/09/23 15:42:58 UTC, 0 replies.
- CVE-2024-39928: Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability - posted by Heping Wang <pe...@apache.org> on 2024/09/24 01:36:57 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on September 21, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/09/24 13:54:02 UTC, 0 replies.
- [ANNOUNCE] Apache Velocity Engine 2.4 released - posted by Claude Brisson <cb...@apache.org> on 2024/09/24 16:43:48 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 10.2.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2024/09/24 19:00:22 UTC, 0 replies.
- CVE-2024-23454: Apache Hadoop: Temporary File Local Information Disclosure - posted by Shilun Fan <sl...@apache.org> on 2024/09/25 01:25:43 UTC, 0 replies.
- CVE-2024-40761: Apache Answer: Avatar URL leaked user email addresses - posted by Enxin Xie <li...@apache.org> on 2024/09/25 06:28:16 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 1.12.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2024/09/25 14:20:24 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 2.6.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2024/09/25 14:22:16 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 8.11.4 released - posted by Houston Putman <ho...@apache.org> on 2024/09/25 18:17:26 UTC, 0 replies.
- [ANNOUNCE] Apache Commons CSV Version 1.12.0 - posted by Gary Gregory <gg...@apache.org> on 2024/09/25 19:48:48 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi NAR Maven Plugin 2.1.0 Released - posted by David Handermann <ex...@apache.org> on 2024/09/25 20:17:50 UTC, 0 replies.
- [ANNOUNCE] Apache ServiceComb Java Chassis version 3.2.2 Released - posted by liubao <li...@apache.org> on 2024/09/26 01:30:47 UTC, 0 replies.
- ANNOUNCE] Apache Spark 3.5.3 released - posted by Kent Yao <ya...@apache.org> on 2024/09/26 02:38:35 UTC, 0 replies.
- [ANNOUNCE] Apache Ratis 3.1.1 Release - posted by Xinyu Tan <ta...@apache.org> on 2024/09/26 07:29:31 UTC, 0 replies.
- CVE-2024-47197: Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials - posted by Slawomir Jaranowski <sj...@apache.org> on 2024/09/26 07:32:57 UTC, 0 replies.
- [ANNOUNCE] Apache CouchDB 3.4.1 released - posted by Jan Lehnardt <ja...@apache.org> on 2024/09/27 09:34:23 UTC, 0 replies.
- [ANNOUNCE] Apache log4net 3.0.1 released - posted by Jan Friedrich <fr...@apache.org> on 2024/09/27 20:24:44 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking BanyanDB Java Client 0.7.0 released - posted by Kai Wan <wa...@apache.org> on 2024/09/28 14:05:57 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 9.12.0 released - posted by Chris Hegarty <ch...@apache.org> on 2024/09/28 20:25:44 UTC, 0 replies.
- CVE-2024-45772: Apache Lucene Replicator: Security Vulnerability in Lucene Replicator - Deserialization Issue - posted by Robert Muir <rm...@apache.org> on 2024/09/29 01:34:30 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Go Client 0.14.0 released - posted by Zike Yang <zi...@apache.org> on 2024/09/30 01:56:19 UTC, 0 replies.
- [ANNOUNCE] Apache Daffodil 3.9.0 Released - posted by Steve Lawrence <sl...@apache.org> on 2024/09/30 15:23:52 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.24.1`released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2024/09/30 18:27:15 UTC, 0 replies.