Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-2870-1: apache-log4j2 security upda
Apache Log4j2, a Java Logging Framework, is vulnerable to a remote code execution (RCE) attack where an attacker with permission to modify the logging configur…
New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
The Apache Software Foundation (ASF) on Tuesday rolled out fresh patches to contain an arbitrary code execution flaw in Log4j that could be abused by threat ac…
Debian LTS: DLA-2852-1: apache-log4j2 security upda
Several security vulnerabilities were found in Apache Log4j2, a Logging Framework for Java, which could lead to a denial of service or information disclosure.
Mageia 2021-0577: apache security upda
Updated apache packages fix security vulnerabilities: A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL poin…
Mageia 2021-0576: apache-mod_security security upda
Updated apache-mod_security packages fix security vulnerability: ModSecurity mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens…
Apache Releases Third Major Log4j Update To Fix A DoS Flaw
Apache has released another update shortly after the second Log4j update addressing a previously “incomplete…Apache Releases Third Major Log4j Update To Fix A …
Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability
The issues with Log4j continued to stack up as the Apache Software Foundation (ASF) on Friday rolled out yet another patch — version 2.17.0 — for the widely us…
Ubuntu 5203-1: Apache Log4j 2 vulnerabili
Apache Log4j 2 could be made to crash if it received specially crafted input.
Another Apache Log4j Bug Discovered – Patch Released – Update (Once Again!)
After the disastrous Log4j vulnerability disrupted the online world, another vulnerability surfaced online. It turns…Another Apache Log4j Bug Discovered – Patc…
‘Vaccine’ For Apache Log4j Vulnerability Released Amidst Active Exploits
As the critical “Log4Shell” bug stirs up the internet, the cybersecurity community is rushing for…‘Vaccine’ For Apache Log4j Vulnerability Released Amidst Acti…
Debian: DSA-5020-1: apache-log4j2 security upda
Chen Zhaojun of Alibaba Cloud Security Team discovered a critical security vulnerability in Apache Log4j, a popular Logging Framework for Java. JNDI features u…
ArchLinux: 202110-1: apache: directory travers
The package apache before version 2.4.51-1 is vulnerable to directory traversal.
Mageia 2021-0470: apache security upda
It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files …
Debian: DSA-4982-1: apache2 security upda
Several vulnerabilities have been found in the Apache HTTP server, which could result in denial of service. In addition a vulnerability was discovered in mod_p…
Apache HTTP Server Project patches exploited zero-day vulnerabili
Developers behind the Apache HTTP Server Project are urging users to apply a fix immediately to resolve a zero-day vulnerability.
Debian LTS: DLA-2776-1: apache2 security upda
Several vulnerabilities were discovered in the Apache HTTP server. An attacker could send proxied requests to arbitrary servers, corrupt memory in some setups …
Ubuntu 5095-1: Apache Commons IO vulnerabili
Apache Commons IO could be made to expose sensitive information if it received a specially crafted input.
Ubuntu 5090-2: Apache HTTP Server vulnerabiliti
Several security issues were fixed in Apache HTTP Server.
Ubuntu 5090-1: Apache HTTP Server vulnerabiliti
Several security issues were fixed in Apache HTTP Server.
Apache OpenOffice can be hijacked by malicious documents, fix still in be
Apache OpenOffice (AOO) is currently vulnerable to a remote code execution vulnerability (CVE-2021-33035) recently discovered by security researcher Eugene Lim…
Gentoo: GLSA-202107-52: Apache Velocity: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Apache Velocity, the worst of which could result in the arbitrary execution of code.
Gentoo: GLSA-202107-39: Apache Commons FileUpload: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Apache Commons FileUpload, the worst of which could result in a Denial of Service condition.
Gentoo: GLSA-202107-38: Apache: Multiple vulnerabiliti
Multiple vulnerabilities have been found in Apache, the worst of which could result in a Denial of Service condition.
Gentoo: GLSA-202107-37: Apache Commons Collections: Remote code executi
Apache Commons Collections unsafely deserializes untrusted input, potentially resulting in arbitrary code execution.