Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Mageia 9: apache-commons-lang3 Important Stack Overflow Bug MGASA-2025-0293
MGASA-2025-0293 - Updated apache-commons-lang3 & apache-commons-lang packages fix security vulnerability
Ubuntu 24.04: Critical Apache Subversion DoS Vulnerability CVE-2024-46901
Apache Subversion could be made to crash if it opened a specially crafted file.
Ubuntu 16.04: Apache Subversion Critical DoS Vulnerability USN-7818-1
Apache Subversion could be made to crash if it opened a specially crafted file.
Ubuntu 20.04 LTS: USN-7639-2 Fix for Apache HTTP Server DoS Vulnerability
Several security issues were fixed in Apache HTTP Server.
Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems
Threat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called …
Debian 11: apache2 Critical Access Control Denial of Service DLA-4270-1
Multiple vulnerabilities have been addressed in Apache, a widely used web server. Please note that the fix for CVE-2025-23048, included in this DLA,
Hackers Are Milking an Old Apache Flaw to Deploy Linuxsys Cryptominer
Let's talk straight: if you're running Apache HTTP Server and you haven't checked your version in a while, you might have a problem. An issue that's now pretty…
How Apache 2.4.64 Goes Beyond Patches to Securing Modern Workloads
Apache HTTP Server 2.4.64 is here, and it's carrying quite a load of security fixes that Linux admins absolutely need to pay attention to. Whether your Apache …
Apache HTTP Server 2.4.64 security patch: major threats resolved and risks
Apache HTTP Server 2.4.64 is here, and it's carrying quite a load of security fixes that Linux admins absolutely need to pay attention to. Whether your Apache …
Ubuntu 14.04 LTS USN-7590-1 important: apache-log4j code execution
Apache Log4j could be made to run programs as your login if it opened a specially crafted file.
Debian Bookworm: DSA-5940-1 critical: modsecurity-apache DoS issue
Several vulnerabilities were discovered in modsecurity-apache, an Apache module to tighten the Web application security, which may result in denial of service …
Debian DSA-5917-1: Critical DoS in libapache2-mod-auth-openidc
A vulnerability has been discovered in mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache HTTP server that implements…
Debian 11: DLA-4155-1 High: libapache2-mod-auth-openidc DoS
A vulnerability has been fixed in mod_auth_openidc, an OpenID Certified authentication and authorization module for the Apache 2.x HTTP server that implements …
Critical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence
A critical security vulnerability has been disclosed in the Apache Roller open-source, Java-based blogging server software that could allow malicious actors to…
Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now
The Apache Software Foundation (ASF) has shipped security updates to address a critical security flaw in Traffic Control that, if successfully exploited, could…
Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks
The Apache Software Foundation (ASF) has released a security update to address an important vulnerability in its Tomcat server software that could result in re…
Gentoo: GLSA-202409-31: Apache HTTPD: Security Advisory Updates
Multiple vulnerabilities have been found in Apache HTTPD, the worst of which could result in denial of service.
Mageia 2024-0315: apache-mod_jk Security Advisory Updates
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration whi…
Defending Against Malicious Web Shells: Lessons from the Apache AXIS Server Attack
Hackers have recently been observed actively targeting the Apache AXIS server to deploy malicious web shells, exposing significant vulnerabilities and risks fo…
Mageia 2024-0272: apache Security Advisory Updates
CVE-2024-40898: Apache HTTP Server: SSRF with mod_rewrite in server/vhost context on Windows (cve.mitre.org) SSRF in Apache HTTP Server on Windows with mod_rew…
Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP
Threat actors are actively exploiting a recently disclosed critical security flaw impacting Apache HugeGraph-Server that could lead to remote code execution at…
Debian: DSA-5729-1: apache2 Security Advisory Updates
Multiple vulnerabilities have been discovered in the Apache HTTP server, which may result in authentication bypass, execution of scripts in directories not dir…
Mageia 2024-0258: apache Security Advisory Updates
Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading pe…
Apache Log4j2 Vulnerability Remains A Threat For Global Finance
Despite a working patch that has been around for years, the Apache Log4j2 vulnerability still…Apache Log4j2 Vulnerability Remains A Threat For Global Finance o…