Re: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) Yann Ylavic (Oct 08).

Re: CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) Roman Medina-Heigl Hernandez (Oct 07).

CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773) Stefan Eissing (Oct 07).

CVE-2021-28129: DEB packaging for Apache OpenOffice 4.1.8 installed with a non-root userid and groupid Dave Fisher (Oct 07).

CVE-2021-40439: Apache OpenOffice: Billion Laughs Dave Fisher (Oct 07).

CVE-2021-33035: Apache OpenOffice: Buffer overflow from a crafted DBF file Dave Fisher (Oct 07).

Xen Security Advisory 386 v2 (CVE-2021-28702) - PCI devices with RMRRs not deassigned correctly Xen.

Multiple vulnerabilities in Jenkins and Jenkins plugins Daniel Beck (Nov 04).

Multiple vulnerabilities in Jenkins and Jenkins plugins Wadeck Follonier (Oct 06).

Xen Security Advisory 386 v1 (CVE-2021-28702) - PCI devices with RMRRs not deassigned correctly Xen.

CVE-2021-39226 Grafana snapshot authentication bypass Richard Hartmann (Oct 05).

Fwd: Node.js security updates for all active release lines, October 2021 Matteo Collina (Oct 05).

RE: CVE-2021-41773: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Tim Wadhwa-Brown (twadhwab) (Oct 07).

CVE-2021-41773: Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 Stefan Eissing (Oct 05).

CVE-2021-41524: Apache HTTP Server: null pointer dereference in h2 fuzzing Stefan Eissing (Oct 05).

Re: 3 new CVE's in vim Alex Gaynor (Oct 04).Re: 3 new CVE's in vim Alan Coopersmith (Oct 04).

Supply Chain Security and Tar Samanta Navarro (Oct 03).

Apache openoffice log4j