Subscribe to Apache Allura’s news feed.
Click on “Follow” and decide if you want to get news from Apache Allura via RSS, as email newsletter, via mobile or on your personal news page.
Subscription to Apache Allura comes without risk as you can unsubscribe instantly at any time.
You can also filter the feed to your needs via topics and keywords so that you only receive the news from Apache Allura which you are really interested in. Click on the blue “Filter” button below to get started.
Website title: Apache Allura
Is this your feed? Claim it!
Apache Allura 1.22.1 has been released.
Security Fixes CVE-2026-118196: OAuth1 rebindingSeverity: critical
Description:
OAuth 1 rebinding vulnerability in Apache Allura.
This issue affects Apache Allura through 1.22.0.
Mitigation:
Users are recommended to upgrade to version 1.22.1, wh...
Apache Allura 1.22.0 has been released.
Security Fixes CVE-2026-92116: OAuth1 missing callback validationSeverity: important
Description:
OAuth1 callback validation vulnerability in Apache Allura.
This issue affects Apache Allura: from through 1.21.0.
Mitigation:
Users are recommended...