Mailing List Archive: Apache: Announce

Subject

Author

Replies

Last Post

CVE-2019-10081: mod_http2, memory corruption on early pushes

by druggeri at apache | Aug 14, 2019, 1:50 PM | 0 replies →

druggeri at apache

Aug 14, 2019, 1:50 PM →

CVE-2019-10082: mod_http2, read-after-free in h2 connection shutdown

by druggeri at apache | Aug 14, 2019, 1:50 PM | 0 replies →

druggeri at apache

Aug 14, 2019, 1:50 PM →

CVE-2019-10092: Limited cross-site scripting in mod_proxy

by druggeri at apache | Aug 14, 2019, 1:50 PM | 0 replies →

druggeri at apache

Aug 14, 2019, 1:50 PM →

CVE-2019-10098: mod_rewrite configurations vulnerable to open redirect

by druggeri at apache | Aug 14, 2019, 1:50 PM | 0 replies →

druggeri at apache

Aug 14, 2019, 1:50 PM →

CVE-2019-9517: mod_http2, DoS attack by exhausting h2 workers

by druggeri at apache | Aug 14, 2019, 1:50 PM | 0 replies →

druggeri at apache

Aug 14, 2019, 1:50 PM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.39 Released

by druggeri at apache | Apr 2, 2019, 6:47 AM | 0 replies →

druggeri at apache

Apr 2, 2019, 6:47 AM →

CVE-2018-17189: mod_http2, DoS via slow, unneeded request bodies

by druggeri at apache | Jan 22, 2019, 10:15 AM | 0 replies →

druggeri at apache

Jan 22, 2019, 10:15 AM →

CVE-2018-17199: mod_session_cookie does not respect expiry time

by druggeri at apache | Jan 22, 2019, 10:15 AM | 0 replies →

druggeri at apache

Jan 22, 2019, 10:15 AM →

CVE-2019-0190: mod_ssl 2.4.37 remote DoS when used with OpenSSL 1.1.1

by druggeri at apache | Jan 22, 2019, 10:15 AM | 0 replies →

druggeri at apache

Jan 22, 2019, 10:15 AM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.38 Released

by druggeri at apache | Jan 22, 2019, 10:15 AM | 0 replies →

druggeri at apache

Jan 22, 2019, 10:15 AM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.37 Released

by druggeri at apache | Oct 23, 2018, 6:15 AM | 0 replies →

druggeri at apache

Oct 23, 2018, 6:15 AM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.35 Released

by druggeri at apache | Sep 25, 2018, 8:15 AM | 0 replies →

druggeri at apache

Sep 25, 2018, 8:15 AM →

CVE-2018-11763: mod_http2, DoS via continuous SETTINGS frames

by druggeri at apache | Sep 25, 2018, 8:15 AM | 0 replies →

druggeri at apache

Sep 25, 2018, 8:15 AM →

CVE-2018-8011: Apache HTTP Server mod_md DoS

by mjc at apache | Jul 18, 2018, 1:02 AM | 0 replies →

mjc at apache

Jul 18, 2018, 1:02 AM →

CVE-2018-1333: Apache HTTP Server HTTP/2 DoS

by mjc at apache | Jul 18, 2018, 1:01 AM | 0 replies →

mjc at apache

Jul 18, 2018, 1:01 AM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.34 Released

by jim at apache | Jul 16, 2018, 9:00 AM | 0 replies →

jim at apache

Jul 16, 2018, 9:00 AM →

CVE-2017-15710: Out of bound write in mod_authnz_ldap when using too small Accept-Language values

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2018-1302: Possible write of after free on HTTP/2 stream shutdown

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2017-15715: <FilesMatch> bypass with a trailing newline in the file name

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2018-1283: Tampering of mod_session data for CGI applications

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2018-1312: Weak Digest auth nonce generation in mod_auth_digest

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2018-1301: Possible out of bound access after failure in reading the HTTP request

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

CVE-2018-1303: Possible out of bound read in mod_cache_socache

by druggeri at apache | Mar 25, 2018, 10:06 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:06 PM →

[ANNOUNCEMENT] Apache HTTP Server 2.4.33 Released

by druggeri at apache | Mar 25, 2018, 10:05 PM | 0 replies →

druggeri at apache

Mar 25, 2018, 10:05 PM →

[ANNOUNCE] Apache HTTP Server 2.4.29 Released

by jim at apache | Oct 23, 2017, 9:44 AM | 0 replies →

jim at apache

Oct 23, 2017, 9:44 AM →