CVE-2026-119618 (critical): mod_HTTP2: heap corruption and RCE in assign_headers httpd.apache.org 38 points by klaas- 1 day ago
klaas- 23 hours ago Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618 rustyhancock 19 hours ago BRB Setting a calender reminder for the new year to install patches canonical puts out.
rustyhancock 19 hours ago BRB Setting a calender reminder for the new year to install patches canonical puts out.
pixl97 21 hours ago Seems kind of gnarly. How hard is this to trigger? rustyhancock 19 hours ago Time for StealMyBitcoinAgain.com ?Remember to make it unexploitable for the first 16 hours. Sohcahtoa82 18 hours ago Until that's answered, I'm going to consider this a Nothingburger. pixl97 17 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
rustyhancock 19 hours ago Time for StealMyBitcoinAgain.com ?Remember to make it unexploitable for the first 16 hours.
Sohcahtoa82 18 hours ago Until that's answered, I'm going to consider this a Nothingburger. pixl97 17 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
pixl97 17 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
nubinetwork 20 hours ago > from 2.4.55 through 2.4.70.Looks at ubuntu... 2.4.52. Well then. linsomniac 18 hours ago 26.04 has 2.4.66-2ubuntu2.7
Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
BRB Setting a calender reminder for the new year to install patches canonical puts out.
I'm tired, boss.
Seems kind of gnarly. How hard is this to trigger?
Time for StealMyBitcoinAgain.com ?
Remember to make it unexploitable for the first 16 hours.
Until that's answered, I'm going to consider this a Nothingburger.
Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
> from 2.4.55 through 2.4.70.
Looks at ubuntu... 2.4.52. Well then.
26.04 has 2.4.66-2ubuntu2.7