You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache Grails 7.0.1 - posted by James Fredley <ja...@apache.org> on 2025/11/02 00:33:57 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.14.2 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/11/02 08:36:29 UTC, 0 replies.
- [ANNOUNCE] Apache Storm 2.8.3 Released - posted by Rui Abreu <ra...@apache.org> on 2025/11/02 17:47:43 UTC, 0 replies.
- CVE-2025-58337: Apache Doris-MCP-Server: Improper Access Control results in bypassing a "read-only" mode for doris-mcp-server MCP Server - posted by Mingyu Chen <mo...@apache.org> on 2025/11/04 12:37:33 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 1.88.0 released - posted by Julian Reschke <re...@apache.org> on 2025/11/04 14:23:19 UTC, 0 replies.
- [ANNOUNCE] Apache Answer 1.7.0 available - posted by Robin Ren <ro...@apache.org> on 2025/11/05 07:09:37 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.16.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/11/05 15:21:44 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.2 & Task SDK 1.1.2 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2025/11/05 15:32:01 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.13.1 released - posted by Shawn Yang <ch...@apache.org> on 2025/11/06 06:54:06 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 21 Released - posted by David Li <li...@apache.org> on 2025/11/07 04:54:11 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 9.10.0 released - posted by Jan Høydahl <ja...@apache.org> on 2025/11/07 09:24:20 UTC, 0 replies.
- Apache Portals is now retired - posted by Niall Pemberton <ni...@apache.org> on 2025/11/07 09:42:51 UTC, 0 replies.
- [ANNOUNCE] Apache Shiro 2.0.6 released - posted by Francois Papon <fp...@apache.org> on 2025/11/07 12:35:08 UTC, 0 replies.
- Apache Commons IO 2.21.0 Release Notes - posted by Gary Gregory <gg...@apache.org> on 2025/11/07 20:12:58 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-03 are released - posted by Jarek Potiuk <po...@apache.org> on 2025/11/08 22:11:13 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi API 2.5.0 Released - posted by David Handermann <ex...@apache.org> on 2025/11/09 02:25:36 UTC, 0 replies.
- [ANNOUNCE] Apache Fluss 0.8.0-incubating released - posted by Jark Wu <ja...@apache.org> on 2025/11/09 15:27:14 UTC, 0 replies.
- Re: [ANNOUNCE] Apache Gluten (incubating) 1.5.0 released - posted by Philo He <ph...@apache.org> on 2025/11/10 03:24:32 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.2 - posted by Mattias Reichel <ma...@apache.org> on 2025/11/10 10:19:52 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 24.09.03 released - posted by Nicolas Malin <nm...@apache.org> on 2025/11/10 13:17:08 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.14 Available - posted by Mark Thomas <ma...@apache.org> on 2025/11/10 15:41:12 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.112 available - posted by Rémy Maucherat <re...@apache.org> on 2025/11/10 16:07:36 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.49 Available - posted by Christopher Schultz <sc...@apache.org> on 2025/11/11 02:58:35 UTC, 0 replies.
- CVE-2025-59118: Apache OFBiz: Critical Remote Command Execution via Unrestricted File Upload - posted by Jacques Le Roux <jl...@apache.org> on 2025/11/11 10:13:44 UTC, 0 replies.
- CVE-2025-61623: Apache OFBiz: Reflected Cross-site Scripting - posted by Jacques Le Roux <jl...@apache.org> on 2025/11/11 10:13:53 UTC, 0 replies.
- [ANNOUNCE] Apache CouchDB 3.5.1 released - posted by Jan Lehnardt <ja...@apache.org> on 2025/11/11 10:25:53 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow CTl 0.1.0 from 0.1.0rc2 released - posted by Jarek Potiuk <po...@apache.org> on 2025/11/11 16:52:33 UTC, 0 replies.
- CVE-2025-64401: Apache OpenOffice: Remote documents loaded without prompt via IFrame - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:35:57 UTC, 0 replies.
- CVE-2025-64402: Apache OpenOffice: Remote documents loaded without prompt via OLE objects - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:36:31 UTC, 0 replies.
- CVE-2025-64403: Apache OpenOffice: Remote documents loaded without prompt via "external data sources" in Calc - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:36:57 UTC, 0 replies.
- CVE-2025-64404: Apache OpenOffice: Remote documents loaded without prompt via background and bullet images - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:37:25 UTC, 0 replies.
- CVE-2025-64405: Apache OpenOffice: Remote documents loaded without prompt via DDE function - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:37:54 UTC, 0 replies.
- CVE-2025-64406: Apache OpenOffice: Possible memory corruption during CSV import - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:38:18 UTC, 0 replies.
- CVE-2025-64407: Apache OpenOffice: URL fetching can be used to exfiltrate arbitrary INI file values and environment variables - posted by Arrigo Marchiori <ar...@apache.org> on 2025/11/11 22:38:42 UTC, 0 replies.
- [ANNOUNCE] Release Apache Kvrocks 2.14.0 - posted by Twice <tw...@apache.org> on 2025/11/12 02:17:15 UTC, 0 replies.
- Apache Kibble is now retired - posted by Niall Pemberton <ni...@apache.org> on 2025/11/12 13:20:43 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 28 Released - posted by Eric Barboni <sk...@apache.org> on 2025/11/12 15:54:15 UTC, 0 replies.
- [ANNOUNCE] Apache OpenOffice 4.1.16 released - posted by Marcus <ma...@apache.org> on 2025/11/12 22:56:12 UTC, 0 replies.
- [ANNOUNCE] Apache Commons CLI 1.11.0 - posted by Gary Gregory <gg...@apache.org> on 2025/11/13 01:53:59 UTC, 0 replies.
- [ANNOUNCE] Apache Ratis 3.2.1 Release - posted by Xinyu Tan <ta...@apache.org> on 2025/11/13 14:20:10 UTC, 0 replies.
- [ANN] Maven 4.0.0-rc-5 released ! - posted by Guillaume Nodet <gn...@apache.org> on 2025/11/13 15:21:28 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client C++ 3.8.0 released - posted by Yunze Xu <xy...@apache.org> on 2025/11/14 09:48:41 UTC, 0 replies.
- [ANN] Apache ActiveMQ Classic 6.2.0 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/11/14 09:56:03 UTC, 0 replies.
- [ANN] Apache Karaf Decanter 2.12.0 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/11/14 12:17:50 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 4.1.1 - posted by Lianet Magrans <li...@apache.org> on 2025/11/14 13:27:45 UTC, 0 replies.
- [ANNOUNCE] Apache Commons JEXL 3.6.0 - posted by Gary Gregory <gg...@apache.org> on 2025/11/14 14:10:20 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.3 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2025/11/14 16:16:39 UTC, 0 replies.
- [ANNOUNCE] Apache POI 5.5.0 release - posted by PJ Fanning <fa...@apache.org> on 2025/11/16 12:37:56 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Lang 3.20.0 - posted by Gary Gregory <gg...@apache.org> on 2025/11/16 16:05:36 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.0.15 released - posted by Lari Hotari <lh...@apache.org> on 2025/11/17 08:54:05 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.8 released - posted by Lari Hotari <lh...@apache.org> on 2025/11/17 08:54:46 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.1.2 released - posted by Lari Hotari <lh...@apache.org> on 2025/11/17 09:00:00 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 10.3.2 released - posted by Simon Cooper <th...@apache.org> on 2025/11/17 11:05:29 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Validator 1.10.1 - posted by Gary Gregory <gg...@apache.org> on 2025/11/17 20:04:01 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-14 are released - posted by Jarek Potiuk <po...@apache.org> on 2025/11/17 21:33:44 UTC, 0 replies.
- CVE-2025-64408: Apache Causeway: Java deserialization vulnerability to authenticated attackers - posted by Dan Haywood <da...@apache.org> on 2025/11/19 08:28:56 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-18 are released - posted by Jarek Potiuk <po...@apache.org> on 2025/11/19 09:03:36 UTC, 0 replies.
- [ANNOUNCE] Apache GeaFlow (incubating) 0.7.0 Released - posted by Qiang Zhou <lo...@apache.org> on 2025/11/19 12:32:28 UTC, 0 replies.
- [ANNOUNCE] Establishing the Apache Artemis project - posted by Christopher Shannon <cs...@apache.org> on 2025/11/20 00:50:09 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.3.0 released - posted by PJ Fanning <fa...@apache.org> on 2025/11/20 12:09:53 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 4.4.0 Released - posted by Lari Hotari <lh...@apache.org> on 2025/11/21 07:49:26 UTC, 0 replies.
- [ANNOUNCE] Release Apache Hop 2.16.0 - posted by Bart Maertens <ba...@apache.org> on 2025/11/21 09:20:33 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.3 - posted by James Daugherty <jd...@apache.org> on 2025/11/23 15:20:48 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.3 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/11/24 12:18:15 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.15 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/11/24 12:21:49 UTC, 0 replies.
- CVE-2025-65998: Apache Syncope: Default AES key used for internal password encryption - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/11/24 12:26:06 UTC, 0 replies.
- [ANN] Apache Tomcat Migration tool for Jakarta EE 1.0.10 - posted by Mark Thomas <ma...@apache.org> on 2025/11/24 22:36:50 UTC, 0 replies.
- Apache Griffin is now retired - posted by Niall Pemberton <ni...@apache.org> on 2025/11/25 03:12:10 UTC, 0 replies.
- Apache Traffic Control is now retired - posted by Niall Pemberton <ni...@apache.org> on 2025/11/25 03:12:12 UTC, 0 replies.
- CVE-2025-59390: Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly. - posted by Karan Kumar <ka...@apache.org> on 2025/11/26 04:58:11 UTC, 0 replies.
- CVE-2025-62728: Apache Hive: SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs - posted by Stamatis Zampetakis <za...@apache.org> on 2025/11/26 07:44:56 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Configuration 2.13.0 - posted by Gary Gregory <gg...@apache.org> on 2025/11/26 12:47:33 UTC, 0 replies.
- CVE-2025-54057: Apache SkyWalking: Stored XSS vulnerability - posted by Zhenxu Ke <ke...@apache.org> on 2025/11/27 02:17:59 UTC, 0 replies.
- CVE-2025-59302: Apache CloudStack: Potential remote code execution on Javascript engine defined rules - posted by Harikrishna Patnala <ha...@apache.org> on 2025/11/27 06:35:16 UTC, 0 replies.
- CVE-2025-59454: Apache CloudStack: Lack of user permission validation leading to data leak for few APIs - posted by Harikrishna Patnala <ha...@apache.org> on 2025/11/27 06:35:20 UTC, 0 replies.
- CVE-2023-48796: Apache DolphinScheduler: Sensitive information disclosure - posted by Lidong Dai <li...@apache.org> on 2025/11/28 05:01:20 UTC, 0 replies.
- CVE-2025-59790: Apache Kvrocks: RESET command grants admin privileges - posted by Hulk Lin <hu...@apache.org> on 2025/11/28 13:59:33 UTC, 0 replies.
- CVE-2025-59792: Apache Kvrocks: MONITOR command reveals plaintext credentials to non-admins - posted by Hulk Lin <hu...@apache.org> on 2025/11/28 14:00:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-11-27 are released - posted by Jens Scheffler <js...@apache.org> on 2025/11/30 22:37:02 UTC, 1 replies.