You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache log4cxx 1.4.0 released - posted by Stephen Webb <sw...@apache.org> on 2025/03/01 01:58:40 UTC, 0 replies.
- [ANN] Apache Struts 7.0.3 - posted by Lukasz Lenart <lu...@apache.org> on 2025/03/03 08:47:40 UTC, 0 replies.
- CVE-2024-24778: Apache StreamPipes: Resources Permission Escalation - posted by Philipp Zehnder <ze...@apache.org> on 2025/03/03 10:34:02 UTC, 0 replies.
- [ANNOUNCEMENT] Apache CloudStack 4.19.2.0 release - posted by Daan Hoogland <da...@apache.org> on 2025/03/03 11:27:25 UTC, 0 replies.
- CVE-2024-55532: Apache Ranger: Improper Neutralization of Formula Elements in a CSV File - posted by Velmurugan Periasamy <ve...@apache.org> on 2025/03/03 15:54:01 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.8.4 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/04 15:08:07 UTC, 0 replies.
- [ANNOUNCE] Apache Impala 4.5.0 release - posted by Peter Rozsa <pr...@apache.org> on 2025/03/04 17:06:56 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.1 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/04 19:43:35 UTC, 0 replies.
- [ANNOUNCE] Apache Calcite Avatica Go 5.4.0 released - posted by Francis Chuang <fr...@apache.org> on 2025/03/05 01:46:48 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.13.0 released - posted by Baodi Shi <ba...@apache.org> on 2025/03/05 10:01:52 UTC, 0 replies.
- [ANN] Apache Struts 6.7.4 - posted by Lukasz Lenart <lu...@apache.org> on 2025/03/05 14:12:08 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 10.0.4 Release - posted by Chris McFarlen <cm...@apache.org> on 2025/03/05 15:51:40 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 4.2.0 released - posted by David Jensen <dj...@apache.org> on 2025/03/06 09:10:13 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.102 available - posted by Rémy Maucherat <re...@apache.org> on 2025/03/06 13:10:12 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.5 Available - posted by Mark Thomas <ma...@apache.org> on 2025/03/06 17:01:10 UTC, 0 replies.
- [ANNOUNCE] Apache Curator 5.8.0 released - posted by tison <ti...@apache.org> on 2025/03/06 20:19:18 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 17 Released - posted by David Li <li...@apache.org> on 2025/03/07 01:32:08 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Projection 1.1.0 released - posted by PJ Fanning <fa...@apache.org> on 2025/03/07 08:06:49 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 18.12.18 released - posted by Jacopo Cappellato <ja...@apache.org> on 2025/03/07 10:18:44 UTC, 0 replies.
- CVE-2025-26865: Apache OFBiz: Server-Side Template Injection affecting the ecommerce plugin leading to possible RCE - posted by Jacques Le Roux <jl...@apache.org> on 2025/03/07 13:39:51 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.8.5 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/08 20:31:11 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client Python 3.6.1 released - posted by Yunze Xu <xy...@apache.org> on 2025/03/09 01:31:45 UTC, 0 replies.
- CVE-2025-27636: Apache Camel: Camel Message Header Injection via Improper Filtering - posted by Andrea Cosentino <ac...@apache.org> on 2025/03/09 10:40:03 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.2 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/09 11:39:30 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 3.22.4 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/09 19:55:31 UTC, 0 replies.
- Fwd: Announcing Fineract Release 1.11.0 - posted by James Dailey <jd...@apache.org> on 2025/03/10 01:09:10 UTC, 0 replies.
- [ANN] Apache Maven 4.0.0-rc-3 released - posted by Guillaume Nodet <gn...@apache.org> on 2025/03/10 13:35:40 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.11 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/03/10 15:28:39 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.0-M1 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/03/10 15:29:35 UTC, 0 replies.
- [SECURITY] CVE-2025-24813 Potential RCE and/or information disclosure and/or information corruption with partial PUT - posted by Mark Thomas <ma...@apache.org> on 2025/03/10 16:38:12 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 6.1.6 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/03/10 17:39:03 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.3.0 Released - posted by Pierre Villard <pv...@apache.org> on 2025/03/11 11:30:46 UTC, 0 replies.
- CVE-2025-27017: Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record - posted by Pierre Villard <pv...@apache.org> on 2025/03/11 15:23:50 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 5.19.0 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/03/11 15:54:01 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 9.8.1 released - posted by Houston Putman <ho...@apache.org> on 2025/03/11 23:36:01 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.13.1 released - posted by Baodi Shi <ba...@apache.org> on 2025/03/12 12:54:09 UTC, 0 replies.
- CVE-2025-29891: Apache Camel: Camel Message Header Injection through request parameters - posted by Andrea Cosentino <ac...@apache.org> on 2025/03/12 14:06:47 UTC, 0 replies.
- [ANNOUNCE] Apache James JSPF 1.0.5 released - posted by Rene Cordier <rc...@apache.org> on 2025/03/13 08:27:46 UTC, 0 replies.
- [ANNOUNCE] Apache James JDKIM 0.4 released - posted by Rene Cordier <rc...@apache.org> on 2025/03/13 08:28:16 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on March 09, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/03/13 17:51:11 UTC, 0 replies.
- [ANNOUNCE] Apache Geronimo Java Mail 2.1_1.0.1 - posted by Francois Papon <fp...@apache.org> on 2025/03/14 07:04:25 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 4.0.0 Released - posted by Lari Hotari <lh...@apache.org> on 2025/03/14 07:58:44 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 4.2.1 released - posted by David Jensen <dj...@apache.org> on 2025/03/14 13:57:55 UTC, 0 replies.
- [ANN] Apache Maven Daemon 2.0.0-rc-3 released - posted by Guillaume Nodet <gn...@apache.org> on 2025/03/15 07:40:46 UTC, 0 replies.
- [ANNOUNCE] Apache Calcite 1.39.0 released - posted by Stamatis Zampetakis <za...@apache.org> on 2025/03/16 11:30:42 UTC, 0 replies.
- [ANNOUNCE] Apache BVal 3.0.2 - posted by Markus Jung <ju...@apache.org> on 2025/03/16 16:52:38 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow Go v18.2.0 Released - posted by Matt Topol <ze...@apache.org> on 2025/03/16 22:07:43 UTC, 0 replies.
- [ANNOUNCE] Apache CouchDB 3.4.3 released - posted by Jan Lehnardt <ja...@apache.org> on 2025/03/18 09:25:06 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 4.0.0 - posted by David Jacot <da...@apache.org> on 2025/03/18 15:43:17 UTC, 0 replies.
- [ANNOUNCE] Apache YuniKorn v1.6.2 released - posted by Wilfred Spiegelenburg <wi...@apache.org> on 2025/03/19 00:54:29 UTC, 0 replies.
- CVE-2025-27018: Apache Airflow MySQL Provider: SQL injection in MySQL provider core function - posted by Elad Kalif <el...@apache.org> on 2025/03/19 08:20:43 UTC, 0 replies.
- CVE-2024-47552: Apache Seata (incubating): Deserialization of untrusted Data in jraft mode in Apache Seata Server - posted by Min Ji <ji...@apache.org> on 2025/03/19 15:31:52 UTC, 0 replies.
- CVE-2024-54016: compression bomb attack in Apache Seata Server - posted by Min Ji <ji...@apache.org> on 2025/03/19 15:33:56 UTC, 0 replies.
- CVE-2025-27888: Apache Druid: Server-Side Request Forgery and Cross-Site Scripting - posted by Adarsh Sanjeev <ad...@apache.org> on 2025/03/19 16:23:09 UTC, 0 replies.
- [ANNOUNCE] Apache Commons CSV 1.14.0 - posted by Gary Gregory <gg...@apache.org> on 2025/03/19 22:23:00 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.3.4 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/03/20 12:32:26 UTC, 0 replies.
- CVE-2025-26796: Apache Oozie: XSS in Oozie Web Console - posted by Arnout Engelen <en...@apache.org> on 2025/03/21 16:29:17 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 5.18.7 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/03/22 04:38:39 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 5.17.7 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/03/22 04:42:30 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 5.16.8 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/03/22 05:10:05 UTC, 0 replies.
- Apache Cocoon is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2025/03/23 07:29:11 UTC, 0 replies.
- CVE-2025-27553: Apache Commons VFS: Possible path traversal issue when using NameScope.DESCENDENT - posted by "Gary D. Gregory" <gg...@apache.org> on 2025/03/23 13:29:52 UTC, 0 replies.
- CVE-2025-30474: Apache Commons VFS: Failing to find an FTP file can reveal the URI's password in an error message - posted by "Gary D. Gregory" <gg...@apache.org> on 2025/03/23 13:30:23 UTC, 0 replies.
- [ANNOUNCE] Apache Answer v1.4.5 available - posted by Luffy <lu...@apache.org> on 2025/03/24 03:36:42 UTC, 0 replies.
- [ANNOUNCE] Apache StormCrawler (Incubating) 3.3.0 released - posted by Tim Allison <ta...@apache.org> on 2025/03/24 12:58:52 UTC, 0 replies.
- [ANNOUNCE] release of Apache VCL 2.5.2 - posted by Josh Thompson <jf...@apache.org> on 2025/03/24 17:19:23 UTC, 0 replies.
- CVE-2024-53678: Apache VCL: SQL injection vulnerability in New Block Allocation form - posted by Josh Thompson <jf...@apache.org> on 2025/03/24 17:23:50 UTC, 0 replies.
- CVE-2024-53679: Apache VCL: XSS vulnerability in User Lookup impacting user privileges - posted by Josh Thompson <jf...@apache.org> on 2025/03/24 17:24:08 UTC, 0 replies.
- [ANNOUNCE] Apache Solr Operator v0.9.1 released - posted by Jason Gerlowski <ge...@apache.org> on 2025/03/25 16:58:07 UTC, 0 replies.
- [ANNOUNCE] Apache Iceberg Go Release v0.2.0 - posted by Matt Topol <ze...@apache.org> on 2025/03/26 19:26:16 UTC, 0 replies.
- CVE-2024-48944: Apache Kylin: SSRF vulnerability in the diagnosis api - posted by Li Yang <li...@apache.org> on 2025/03/27 01:24:49 UTC, 0 replies.
- CVE-2025-30067: Apache Kylin: The remote code execution via jdbc url - posted by Li Yang <li...@apache.org> on 2025/03/27 01:25:19 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.22.22 released - posted by Julian Reschke <re...@apache.org> on 2025/03/27 10:16:32 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Client 5.4.3 GA Released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/03/27 10:52:33 UTC, 0 replies.
- [ANN] Apache TomEE 10.0.1 - posted by Richard Zowalla <rz...@apache.org> on 2025/03/27 22:02:57 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Filevault 3.8.4 released - posted by Julian Reschke <re...@apache.org> on 2025/03/28 13:11:17 UTC, 0 replies.
- [ANN] Apache OpenJPA 4.1.0 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/03/31 06:35:21 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on March 26, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/03/31 07:55:13 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.3 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/03/31 10:13:44 UTC, 0 replies.
- CVE-2025-27427: Apache ActiveMQ Artemis: Address routing-type can be updated by user without the createAddress permission - posted by Justin Bertram <jb...@apache.org> on 2025/03/31 14:18:22 UTC, 0 replies.