News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerability in Apache HTTP Server.

Re:Critical RCE Vulnerability in Apache HTTP Server by koolba on Wednesday November 11, 2026 @10:04PM (#50462534)
Why does it say the “vendor” for this is GitHub (for mod_h2)?

Is that just crappy LLM generated copy that is assuming that GitHub the company is responsible for that module because it’s hosted there?

[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by stonogo on Wednesday November 11, 2026 @10:43PM (#50462810)
Yes, this is slop, extruded from reading the patch and the official announcement, which is at https://httpd.apache.org/security/vulnerabilities_24.html#CV...
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by ozgrakkurt on Wednesday November 11, 2026 @10:51PM (#50462864)
The writing really feels like it was written by a 4GB gemini model running on a phone.

Even having "Which actions should security teams take?" is so incredibly stupid imo. If there is a vulnerability and new version is patched, and I am a security team member reading this, then..

[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by Insimwytim on Wednesday November 11, 2026 @10:51PM (#50462866)
This is Wiz.

Of course that is crappy LLM generated copy.

[ Parent | on HN ]