You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache Kyuubi v1.9.3 is available - posted by Cheng Pan <ch...@apache.org> on 2024/12/02 10:20:28 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.8.3 is available - posted by Cheng Pan <ch...@apache.org> on 2024/12/02 10:22:25 UTC, 0 replies.
- [ANNOUNCE] Apache CloudStack LTS Release 4.20.0.0 - posted by João Jandre <jo...@apache.org> on 2024/12/02 13:31:39 UTC, 0 replies.
- CVE-2024-45106: Apache Ozone: Improper authentication when generating S3 secrets - posted by Ethan Rose <er...@apache.org> on 2024/12/02 15:57:47 UTC, 0 replies.
- [ANNOUNCE] Apache Commons DBCP Version 2.13.0 - posted by Gary Gregory <gg...@apache.org> on 2024/12/02 18:49:31 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.0.8 released - posted by Lari Hotari <lh...@apache.org> on 2024/12/02 18:50:09 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.1 released - posted by Lari Hotari <lh...@apache.org> on 2024/12/03 09:31:00 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.3.3 released - posted by Lari Hotari <lh...@apache.org> on 2024/12/03 15:00:36 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 18.1.0 released - posted by Jacob Wujciak <as...@apache.org> on 2024/12/04 04:03:55 UTC, 0 replies.
- [ANNOUNCE] Apache UIMA Ruta v3.5.0 released - posted by Richard Eckart de Castilho <re...@apache.org> on 2024/12/04 11:23:51 UTC, 0 replies.
- CVE-2022-41137: Apache Hive: Deserialization of untrusted data when fetching partitions from the Metastore - posted by Stamatis Zampetakis <za...@apache.org> on 2024/12/04 13:28:56 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.9.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2024/12/04 14:51:19 UTC, 0 replies.
- [ANNOUNCE] Apache Uniffle (Incubating) 0.9.1 available - posted by zhengchenyu <zh...@apache.org> on 2024/12/05 10:02:42 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.8.2 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2024/12/05 18:09:05 UTC, 0 replies.
- [ANNOUNCE] Apache OpenNLP 2.5.1 released - posted by Richard Zowalla <rz...@apache.org> on 2024/12/06 13:46:13 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 3.6.0 released - posted by David Jensen <dj...@apache.org> on 2024/12/09 10:55:19 UTC, 0 replies.
- CVE-2024-53947: Apache Superset: Improper SQL authorisation, parse not checking for specific postgres functions - posted by Daniel Gaspar <dp...@apache.org> on 2024/12/09 12:14:05 UTC, 0 replies.
- CVE-2024-53948: Apache Superset: Error verbosity exposes metadata in analytics databases - posted by Daniel Gaspar <dp...@apache.org> on 2024/12/09 12:22:22 UTC, 0 replies.
- CVE-2024-53949: Apache Superset: Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled - posted by Daniel Gaspar <dp...@apache.org> on 2024/12/09 12:37:46 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.2 Available - posted by Mark Thomas <ma...@apache.org> on 2024/12/09 13:15:40 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.98 available - posted by Rémy Maucherat <re...@apache.org> on 2024/12/09 14:40:52 UTC, 0 replies.
- [ANNOUNCE] Apache Celeborn 0.4.3 available - posted by Cheng Pan <ch...@apache.org> on 2024/12/10 13:54:25 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 3.8.0 Released - posted by Lari Hotari <lh...@apache.org> on 2024/12/10 17:52:13 UTC, 0 replies.
- [ANNOUNCE] MyFaces Core v4.1.0 Release - posted by Volodymyr Siedlecki <vo...@apache.org> on 2024/12/10 18:17:40 UTC, 0 replies.
- [ANNOUNCE] Apache StormCrawler (Incubating) 3.2.0 released - posted by Tim Allison <ta...@apache.org> on 2024/12/10 21:50:12 UTC, 0 replies.
- [ANN] CVE-2024-53677 File upload logic is flawed - posted by Lukasz Lenart <lu...@apache.org> on 2024/12/11 07:25:33 UTC, 0 replies.
- [ANNOUNCE] Apache KIE (Incubating) 10.0.0 released - posted by Alex Porcelli <po...@apache.org> on 2024/12/11 16:51:23 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Persistence R2DBC 1.1.0-M1 released - posted by PJ Fanning <fa...@apache.org> on 2024/12/12 12:59:50 UTC, 0 replies.
- CVE-2024-55633: Apache Superset: SQLLab Improper readonly query validation allows unauthorized write access - posted by Daniel Gaspar <dp...@apache.org> on 2024/12/12 14:09:29 UTC, 0 replies.
- [ANNOUNCE] Release Apache Hop 2.11.0 - posted by Bart Maertens <ba...@apache.org> on 2024/12/12 15:37:57 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 9.12.1 released - posted by Chris Hegarty <ch...@apache.org> on 2024/12/13 11:33:40 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 24 Released - posted by Eric Barboni <sk...@apache.org> on 2024/12/13 12:28:47 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.24.3` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2024/12/13 12:52:29 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Text 1.13.0 - posted by Gary Gregory <gg...@apache.org> on 2024/12/13 18:38:47 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.7.2 - posted by "Matthias J. Sax" <mj...@apache.org> on 2024/12/13 23:16:28 UTC, 0 replies.
- [ANNOUNCE] Apache XMLBeans 5.3.0 release - posted by PJ Fanning <fa...@apache.org> on 2024/12/14 14:09:23 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.10.4 Released - posted by Utkarsh Sharma <ut...@apache.org> on 2024/12/16 12:28:10 UTC, 0 replies.
- [ANNOUNCE] Released Reactive client for Apache Pulsar, version 0.5.10 - posted by Chris Bono <on...@apache.org> on 2024/12/16 22:37:16 UTC, 0 replies.
- [SECURITY] CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet - posted by Mark Thomas <ma...@apache.org> on 2024/12/17 12:26:22 UTC, 0 replies.
- [SECURITY] CVE-2024-54677 Apache Tomcat - DoS in examples web application - posted by Mark Thomas <ma...@apache.org> on 2024/12/17 12:26:27 UTC, 0 replies.
- CVE-2024-56128: Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption - posted by Manikumar <ma...@apache.org> on 2024/12/18 13:32:59 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 10.3.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2024/12/18 21:44:51 UTC, 0 replies.
- [ANN] Apache Struts 7.0.0 GA - posted by Lukasz Lenart <lu...@apache.org> on 2024/12/20 06:52:05 UTC, 0 replies.
- [SECURITY] CVE-2024-56337 Apache Tomcat - RCE via write-enabled default servlet - CVE-2024-50379 mitigation was incomplete - posted by Mark Thomas <ma...@apache.org> on 2024/12/20 15:17:42 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 3.22.3 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2024/12/20 16:25:41 UTC, 0 replies.
- [ANN] Apache TomEE 10.0.0 (GA) - posted by Richard Zowalla <rz...@apache.org> on 2024/12/20 19:46:28 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 10.1.0 released - posted by Luca Cavanna <ja...@apache.org> on 2024/12/20 20:40:09 UTC, 0 replies.
- CVE-2024-23945: Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails - posted by Stamatis Zampetakis <za...@apache.org> on 2024/12/23 14:31:53 UTC, 0 replies.
- CVE-2024-45387: Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments - posted by Eric Friedrich <fr...@apache.org> on 2024/12/23 15:02:31 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.1.0 Released - posted by David Handermann <ex...@apache.org> on 2024/12/24 02:43:43 UTC, 0 replies.
- CVE-2024-43441: Apache HugeGraph-Server: Fixed JWT Token(Secret) - posted by Imba Jin <ji...@apache.org> on 2024/12/24 10:41:57 UTC, 0 replies.
- [ANNOUNCE] Apache FreeMarker 2.3.34 is released - posted by Daniel Dekany <dd...@apache.org> on 2024/12/24 11:14:20 UTC, 0 replies.
- [ANNOUNCE] Apache MINA 2.0.27, 2.1.0 and 2.2.4 release - posted by Emmanuel Lecharny <el...@apache.org> on 2024/12/24 19:39:16 UTC, 0 replies.
- CVE-2024-52046: Apache MINA: MINA applications using unbounded deserialization may allow RCE - posted by Emmanuel Lécharny <el...@apache.org> on 2024/12/24 22:19:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on December 22, 2024 are released - posted by Elad Kalif <el...@apache.org> on 2024/12/26 09:35:05 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.10.1 is available - posted by Cheng Pan <ch...@apache.org> on 2024/12/26 14:40:16 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 9.19.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2024/12/26 19:49:53 UTC, 0 replies.
- CVE-2024-56512: Apache NiFi: Missing Complete Authorization for Parameter and Service References - posted by David Handermann <ex...@apache.org> on 2024/12/28 01:23:19 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.10 - posted by Francesco Chicchiriccò <il...@apache.org> on 2024/12/30 14:48:05 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.0-M0 - posted by Francesco Chicchiriccò <il...@apache.org> on 2024/12/30 14:48:08 UTC, 0 replies.
- [ANNOUNCE] Apache EventMesh 1.11.0 available - posted by mikexue <mi...@apache.org> on 2024/12/31 02:54:36 UTC, 0 replies.