Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 2019-0410: apache-mod_auth_openidc security upda
The updated package fixes a security vulnerability: A flaw was found in mod_auth_openidc before version 2.4.0.1. An open redirect issue exists in URLs with tr…
Mageia 2019-0407: apache security upda
The updated packages fix security vulnerabilities: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to …
SUSE: 2019:3213-1 moderate: apache2-mod_pe
An update that solves one vulnerability and has one errata is now available.
openSUSE: 2019:2558-1: moderate: apache2-mod_pe
An update that solves one vulnerability and has one errata is now available.
openSUSE: 2019:2549-1: moderate: apache2-mod_pe
An update that solves one vulnerability and has one errata is now available.
openSUSE: 2019:2499-1: important: apache2-mod_auth_openidc
An update that fixes one vulnerability is now available.
Fedora 31: apache-commons-beanutils FEDORA-2019-bcad44b5d6
Update to version 1.9.4. Resolves CVE-2019-10086.
Fedora 30: apache-commons-beanutils FEDORA-2019-79b5790566
Update to version 1.9.4. Resolves CVE-2019-10086.
SUSE: 2019:2934-1 important: apache2-mod_auth_openidc
An update that fixes one vulnerability is now available.
SUSE: 2019:2935-1 important: apache2-mod_auth_openidc
An update that fixes one vulnerability is now available.
Fedora 31: apache-commons-compress FEDORA-2019-da0eac1eb6
Update to version 1.19. Resolves CVE-2019-12402.
Fedora 30: apache-commons-compress FEDORA-2019-c96a8d12b0
Update to version 1.19. Resolves CVE-2019-12402.
RedHat: RHSA-2019-2946:01 Important: Red Hat JBoss Core Services Apache
An update is now available for JBoss Core Services on RHEL 6 and RHEL 7. Red Hat Product Security has rated this update as having a security impact of Importan…
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There…
OpenOffice Vulnerability Can Run Code From Malicious Documents
Apache is asking OpenOffice users to turn off its Java integration after warning that a malicious document could run code on their computer.
Debian LTS apr-util DLA-4742-1 Denial of Service and Code Execution
Multiple vulnerabilities in the Apache Portable Runtime Utility library apr-util could lead to denial of service or arbitrary code execution; updates are avail…
Fedora 44 apr-util 1.6.5 Denial of Service CVE-2026-32327
Fedora 44 has released apr-util version 1.6.5 with security fixes, enhancing its Apache Portable Runtime Utility library for better handling of XML, LDAP, and …
Fedora 44 Trafficserver Major ACL Bypass Memory Safety Vulnerabilities
The Fedora 44 update for Apache Traffic Server version 10.1.4 addresses multiple security vulnerabilities, including request smuggling and memory-safety issues…
Oracle Linux 8 httpd Important Arbitrary Code Execution Fix ELSA-2026-42828
Oracle Linux released updates for Apache HTTP Server and related modules addressing multiple CVEs for security vulnerabilities, along with package version chan…
HTTP/2 Bomb: Why Linux Infrastructure is Vulnerable to a New Low-Bandwidth DoS Attack
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Fedora 42 trafficserver Key Request Smuggling Crash Resolution Update
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling Changes wit…
Debian TrafficServer Severe Denial of Service and HTTP Smuggling DSA-6199-1
Two vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or HTTP request smugg…
CVE-2023-46604: Critical Threat for Linux Servers Running ActiveMQ
CVE-2023-46604 is not just another box on your patching to-do list''it's a major remote code execution (RCE) vulnerability in Apache ActiveMQ that admins need …
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate their privile…