Vulnerabilities
Apache Tomcat FIPS Mode Bypass Leaves Server Non-Compliant on Startup Failure
Tomcat continues running in standard JSSE mode if OpenSSL-FFM FIPS activation fails, creating a silent compliance gap for affected versions.
oss-security
Everything Packet Tribune has reported about oss-security: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Kylin Cache API Bug Lets Admins Exhaust Resources in Versions up to 5.0.4
An unpatched vulnerability in Apache Kylin allows project admins to exhaust system resources via cache APIs, affecting versions up to 5.0.4.