You are viewing a plain text version of this content. The canonical link for it is here.
- #showReferrersList not returning results - posted by Richard via user <us...@roller.apache.org> on 2026/09/03 21:13:20 UTC, 2 replies.
- Font Awesome icons not displaying in Roller 6.1.6 RC1 - using Guarav theme - posted by Richard via user <us...@roller.apache.org> on 2026/09/08 02:33:54 UTC, 2 replies.
- No full text search results - related to Allow same-origin webfonts in preset theme CSP? - posted by Richard via user <us...@roller.apache.org> on 2026/09/08 15:42:10 UTC, 4 replies.
- [ANNOUNCE] Apache Roller 6.1.6 released - posted by Dave <sn...@gmail.com> on 2026/09/24 23:06:21 UTC, 0 replies.
- CVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayed - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:11:29 UTC, 0 replies.
- CVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validation - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:11:35 UTC, 0 replies.
- CVE-2026-82381: Apache Roller: Stored cross-site scripting in the authoring UI - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:11:40 UTC, 0 replies.
- CVE-2026-82382: Apache Roller: Reflected cross-site scripting in the frontpage directory parameter - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:11:52 UTC, 0 replies.
- CVE-2026-82383: Apache Roller: Anonymous setup action allows frontpage configuration tampering - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:11:57 UTC, 0 replies.
- CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:12:02 UTC, 0 replies.
- CVE-2026-82375: Apache Roller: Server-side request forgery via entry trackback and enclosure URLs - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:12:25 UTC, 0 replies.
- CVE-2026-82376: Apache Roller: XML external entity processing in trackback response parser - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:12:30 UTC, 0 replies.
- CVE-2026-82377: Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:12:36 UTC, 0 replies.
- CVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identity - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:12:42 UTC, 0 replies.
- CVE-2026-82385: Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:13:00 UTC, 0 replies.
- CVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark import - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:13:09 UTC, 0 replies.
- CVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:16:37 UTC, 0 replies.
- CVE-2026-82387: Apache Roller: Stored cross-site scripting via uploaded media content type - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:16:41 UTC, 0 replies.
- CVE-2026-82546: Apache Roller: Stored cross-site scripting through incoming Trackback links - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:16:46 UTC, 0 replies.
- CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URL - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:16:50 UTC, 0 replies.
- CVE-2026-91204: Apache Roller: Stored javascript: URI in HTML comments - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:16:55 UTC, 0 replies.
- CVE-2026-91206: Apache Roller: Reflected XSS in the optional LDAP comment authenticator - posted by "David M. Johnson" <sn...@apache.org> on 2026/09/25 20:17:00 UTC, 0 replies.
- [ANNOUNCE] Apache Roller 6.1.6 fixes 18 security vulnerabilities - posted by Dave <sn...@gmail.com> on 2026/09/27 20:57:59 UTC, 0 replies.