fidzu : nerd

A critical flaw in Apache HTTP Server's HTTP/2 module could allow unauthenticated attackers to remotely execute code and potentially take control of affected server processes. Tracked as CVE-2026-119618, the vulnerability affects Apache HTTP Server 2.4.55 through 2.4.70 when HTTP/2 is enabled and is fixed in version 2.4.71. The Hacker News reports: The vendor's assessment, published yesterday, also says "public research has demonstrated a reliable exploit" against a server in its default configuration with mod_http2 enabled. It does not name or link that research. Security company Wiz said later that day that no exploit was available and that no exploitation in the wild had been reported. HTTP/2 runs only where the Protocols directive turns it on, as the module documentation explains. The directive uses h2 for HTTP/2 over TLS and h2c for HTTP/2 over plain TCP. It can be set for the whole server or for a single virtual host, so admins should check the server-wide setting and every virtual host. Standalone builds of the module, released on GitHub as mod_h2, are affected from version 2.0.8 through 2.0.42. Admins who run the Apache HTTP Server project's own releases should move to version 2.4.71, the fixed release named in its security advisory. That release also fixes a crash in mod_md, rated important, and a one-byte overwrite of stack memory in mod_vhost_alias, rated low.

Read more of this story at Slashdot.

12 Nov 2026 5:00pm GMT

Comments

12 Nov 2026 4:59pm GMT

Comments

12 Nov 2026 4:29pm GMT

Jensen Huang has stepped down as CEO of Nvidia after 33 years leading the company, with CFO Colette Kress taking over as interim CEO while the board searches for a permanent replacement. "The Board has full confidence in Colette and the leadership team, and we expect the company's operations, customer commitments and product roadmap to continue without interruption," said board chair Harvey Jones in a release announcing the news. The abrupt departure follows revelations about Huang's affairs, including one with a woman U.S. intelligence reportedly believes was a Chinese spy. CNBC reports: Huang, 63, apologized on Sunday for being "unfaithful to my wife," though he provided no details about the affair with businesswoman Alice Huang, who has worked for a Chinese company and Nvidia customer called Megaspeed. Late Wednesday, The New York Times reported that the Nvidia CEO also had a separate affair, this one with Kimberly Powell, vice president of health care at the chipmaker. Later that afternoon The Times and other outlets reported that Nvidia's board met to discuss the company's future. Jensen Huang denied allegations that he had compromised national security or Nvidia secrets after reports of the Alice Huang affair. The news sparked concerns that Nvidia knew companies based in Singapore and Malaysia had been evading U.S. export controls in accessing its technology. The board said on Tuesday that it had hired Wachtell Lipton to investigate the intelligence allegations.

Read more of this story at Slashdot.

12 Nov 2026 4:00pm GMT

Comments

12 Nov 2026 3:35pm GMT

LibreOffice 26.8.3 fixes 45 bugs, including crashes in Writer, Calc, and Impress, while improving Microsoft Office compatibility.

12 Nov 2026 1:11pm GMT

Noctalia 5.5 is out with new window switcher layouts, customizable widgets, improved screenshots, and numerous fixes.

12 Nov 2026 11:43am GMT

Tim Peters, one of Python's earliest and most influential contributors, died on July 15 at age 74. Known as Python's second real user, Peters created the Zen of Python and Timsort sorting algorithm while contributing to numerous core components. He also served as a Python Software Foundation director from 2001 to 2014. Adafruit remembers Peters in a blog post: He's best known for the Zen of Python, PEP 20, still printed by typing import this. In 2002, he gave Python Timsort, the sorting algorithm he designed for lists, later adopted by Java and Android. He also polished the cyclic garbage collector and the pymalloc allocator, worked on the dict implementation, the float object, the math module and Karatsuba multiplication in longobject, and wrote the first version of doctest, plus difflib, pickletools and tabnanny. He was a director of the Python Software Foundation from 2001 to 2014. Before Python, he wrote compilers at Cray Research and speech-to-text software at Dragon Systems. The thread is full of recollections from core developers about his patient, detailed answers on the mailing lists, signed with his trademark . Python creator Guido van Rossum also paid tribute to Peters in a post on discuss.python.org, writing: "It's hard to overestimate Tim's influence on Python. He's probably best known for writing the Zen of Python (PEP 20), but to me he was a mentor and language co-designer long before that..." Further discussions can be found on Hacker News and Reddit.

Read more of this story at Slashdot.

12 Nov 2026 11:00am GMT

TLP 1.11 enhances Linux laptop power management with improved firmware profiles, expanded power-saving options, and hardware compatibility fixes.

12 Nov 2026 9:57am GMT