CVE-2026-119618 (critical): mod_HTTP2: heap corruption and RCE in assign_headers httpd.apache.org 28 points by klaas- 13 hours ago
klaas- 11 hours ago Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618 rustyhancock 7 hours ago BRB Setting a calender reminder for the new year to install patches canonical puts out.
rustyhancock 7 hours ago BRB Setting a calender reminder for the new year to install patches canonical puts out.
pixl97 9 hours ago Seems kind of gnarly. How hard is this to trigger? rustyhancock 7 hours ago Time for StealMyBitcoinAgain.com ?Remember to make it unexploitable for the first 16 hours. Sohcahtoa82 6 hours ago Until that's answered, I'm going to consider this a Nothingburger. pixl97 5 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
rustyhancock 7 hours ago Time for StealMyBitcoinAgain.com ?Remember to make it unexploitable for the first 16 hours.
Sohcahtoa82 6 hours ago Until that's answered, I'm going to consider this a Nothingburger. pixl97 5 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
pixl97 5 hours ago Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
nubinetwork 8 hours ago > from 2.4.55 through 2.4.70.Looks at ubuntu... 2.4.52. Well then. linsomniac 6 hours ago 26.04 has 2.4.66-2ubuntu2.7
I'm tired, boss.
Red Hat has released updates https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-119618
BRB Setting a calender reminder for the new year to install patches canonical puts out.
Seems kind of gnarly. How hard is this to trigger?
Time for StealMyBitcoinAgain.com ?
Remember to make it unexploitable for the first 16 hours.
Until that's answered, I'm going to consider this a Nothingburger.
Eh, header issues are a really risky place to have a problem. Pre-auth RCE is bad news, if that's the case.
> from 2.4.55 through 2.4.70.
Looks at ubuntu... 2.4.52. Well then.
26.04 has 2.4.66-2ubuntu2.7