Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Update to version 1.19. Resolves CVE-2019-12402.
Update to version 1.19. Resolves CVE-2019-12402.
An update is now available for JBoss Core Services on RHEL 6 and RHEL 7. Red Hat Product Security has rated this update as having a security impact of Importan…
This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES_2.4.69 for more information.
Changes with Apache Traffic Server 10.2.1 #13553 - origin_server_auth: Improve log messages #13567 - Metrics: Revert added locking and annotations #13505 - Add…
Changes with Apache Traffic Server 10.2.1 #13553 - origin_server_auth: Improve log messages #13567 - Metrics: Revert added locking and annotations #13505 - Add…
Some Apache Kafka servers could accept a made-up identity and give an attacker access as that user.
This update includes httpd version 2.4.69 addressing various security issues, see https://downloads.apache.org/httpd/CHANGES_2.4.69 for more information.
A malicious spreadsheet can make LibreOffice and Apache OpenOffice run an attacker's code as soon as the file is opened, security researchers have shown. There…
Apache is asking OpenOffice users to turn off its Java integration after warning that a malicious document could run code on their computer.
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory instead of in a file on disk, Sophos said in an analy…
Multiple vulnerabilities in the Apache Portable Runtime Utility library apr-util could lead to denial of service or arbitrary code execution; updates are avail…
Fedora 44 has released apr-util version 1.6.5 with security fixes, enhancing its Apache Portable Runtime Utility library for better handling of XML, LDAP, and …
The Fedora 44 update for Apache Traffic Server version 10.1.4 addresses multiple security vulnerabilities, including request smuggling and memory-safety issues…
Oracle Linux released updates for Apache HTTP Server and related modules addressing multiple CVEs for security vulnerabilities, along with package version chan…
A newly disclosed attack technique called HTTP/2 Bomb is drawing attention because it targets the software that sits at the front of much of the Linux internet…
Cybersecurity researchers have discovered a fresh software supply chain attack campaign that has compromised various npm packages associated with the @antv eco…
Resolves: CVE-2025-58136 - A simple legitimate POST request causes a crash CVE-2025-65114 - Malformed chunked message body allows request smuggling Changes wit…
Two vulnerabilities were discovered in Apache Traffic Server, a reverse and forward proxy server, which could result in denial of service or HTTP request smugg…
CVE-2023-46604 is not just another box on your patching to-do list''it's a major remote code execution (RCE) vulnerability in Apache ActiveMQ that admins need …
Let's talk about something that's been slipping under the radar: Soco404 . If you manage Linux systems in any capacity''or just spend time keeping production e…
Changes with Apache Traffic Server 9.2.11 #12169 - 9.2.x: fix libyaml for gcc 15, and cherry-pick fedora:42 updates #12294 - Add a setting to choose the data s…
Apache Tomcat could be made to crash if it received specially crafted network traffic.
Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to elevate their privile…
