News for hackers. Stuff that matters.

A comment on Critical RCE Vulnerability in Apache HTTP Server.

Re:Critical RCE Vulnerability in Apache HTTP Server by z3ratul163071 on Thursday November 12, 2026 @01:52AM (#50463894)
what is amazing, there are no apache updated containers / packages available yet.
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by hypfer on Thursday November 12, 2026 @02:00AM (#50463946)
At least disabling http2 is an easy countermeasure that will probably in most setups not have any real downsides.

If it was even enabled that is.

[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by Deukhoofd on Thursday November 12, 2026 @02:50AM (#50464235)
Why are these things being disclosed before fixes have been rolled out? Is no-one following disclosure protocols any more?
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by yhjz on Thursday November 12, 2026 @04:31AM (#50464986)
Debian tracker: https://security-tracker.debian.org/tracker/CVE-2026-119618 - hopefully the fix lands soon
[ Parent | on HN ]
Re:Critical RCE Vulnerability in Apache HTTP Server by sherr on Thursday November 12, 2026 @05:41AM (#50465427)
Debian has been patched just now and updates available : apache2 2.4.71-1~deb13u1
[ Parent | on HN ]