user  

Messages by Thread

• Pasted images no longer display Richard via user
  • Re: Pasted images no longer display Richard via user
  • Re: Pasted images no longer display Dave
  • Re: Pasted images no longer display Richard via user
  • Re: Pasted images no longer display Dave
  • Re: Pasted images no longer display Richard via user
• [ANNOUNCE] Apache Roller 6.1.6 fixes 18 security vulnerabilities Dave
• CVE-2026-86507: Apache Roller: Stored XSS in comment moderation via comment author URL David M. Johnson
• CVE-2026-82546: Apache Roller: Stored cross-site scripting through incoming Trackback links David M. Johnson
• CVE-2026-82348: Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups David M. Johnson
• CVE-2026-91204: Apache Roller: Stored javascript: URI in HTML comments David M. Johnson
• CVE-2026-91206: Apache Roller: Reflected XSS in the optional LDAP comment authenticator David M. Johnson
• CVE-2026-82387: Apache Roller: Stored cross-site scripting via uploaded media content type David M. Johnson
• CVE-2026-82386: Apache Roller: XML external entity processing in OPML bookmark import David M. Johnson
• CVE-2026-82378: Apache Roller: OAuth authorization endpoint trusts request-supplied identity David M. Johnson
• CVE-2026-82377: Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers David M. Johnson
• CVE-2026-82382: Apache Roller: Reflected cross-site scripting in the frontpage directory parameter David M. Johnson
• CVE-2026-82385: Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files David M. Johnson
• CVE-2026-82376: Apache Roller: XML external entity processing in trackback response parser David M. Johnson
• CVE-2026-82375: Apache Roller: Server-side request forgery via entry trackback and enclosure URLs David M. Johnson
• CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint David M. Johnson
• CVE-2026-82383: Apache Roller: Anonymous setup action allows frontpage configuration tampering David M. Johnson
• CVE-2026-82380: Apache Roller: CSRF protection bypass via self-generated salt validation David M. Johnson
• CVE-2026-82381: Apache Roller: Stored cross-site scripting in the authoring UI David M. Johnson
• CVE-2026-82379: Apache Roller: WSSE digest authentication headers can be replayed David M. Johnson
• [ANNOUNCE] Apache Roller 6.1.6 released Dave
• No full text search results - related to Allow same-origin webfonts in preset theme CSP? Richard via user
  • Re: No full text search results - related to Allow same-origin webfonts in preset theme CSP? Dave
  • Re: No full text search results - related to Allow same-origin webfonts in preset theme CSP? Richard via user
  • Re: No full text search results - related to Allow same-origin webfonts in preset theme CSP? Richard via user
  • Re: No full text search results - related to Allow same-origin webfonts in preset theme CSP? Richard via user
• Font Awesome icons not displaying in Roller 6.1.6 RC1 - using Guarav theme Richard via user
  • Re: Font Awesome icons not displaying in Roller 6.1.6 RC1 - using Guarav theme Dave
  • Re: Font Awesome icons not displaying in Roller 6.1.6 RC1 - using Guarav theme Richard via user
• #showReferrersList not returning results Richard via user
  • Re: #showReferrersList not returning results Dave
  • Re: #showReferrersList not returning results Richard via user
• Installing Roller 6.1.5 on Tomcat 11 Matt Raible
  • Re: Installing Roller 6.1.5 on Tomcat 11 Dave
  • Re: Installing Roller 6.1.5 on Tomcat 11 Matt Raible
  • Re: Installing Roller 6.1.5 on Tomcat 11 Dave
  • Re: Installing Roller 6.1.5 on Tomcat 11 Matt Raible
  • Re: Installing Roller 6.1.5 on Tomcat 11 Dave
• Apache Roller 6.1.5 is available for download Dave
  • Re: Apache Roller 6.1.5 is available for download Dave
• CVE-2024-46911: Apache Roller: Weakness in CSRF protection allows privilege escalation David M. Johnson
• Apache Roller 6.1.4 is available for download Dave Johnson
  • Re: Apache Roller 6.1.4 is available for download Dave
• Roller 6.1.4 is now available for download Dave Johnson
• CVE-2024-25090: Apache Roller: Insufficient input validation for some user profile and bookmark fields when Roller in untested-users mode David M. Johnson
• CVE-2023-37581: Authenticated XSS Vulnerabilities in Apache Roller Dave
• Apache Roller 6.1.3 release is available Dave
• Participate in the ASF 25th Anniversary Campaign Brian Proffitt
• Community Over Code NA 2024 Travel Assistance Applications now open! Gavin McDonald
• Community Over Code Asia 2024 Travel Assistance Applications now open! Gavin McDonald
• Community over Code EU 2024 Travel Assistance Applications now open! Gavin McDonald
• Registration open for Community Over Code North America Rich Bowen
• CVE-2023-37581: Apache Roller: XSS vulnerability for site with untrusted users Dave
• Apache Roller 6.1.2 release is available Dave
• TAC Applications for Community Over Code North America and Asia now open Gavin McDonald
• Setting absolute URL for "child" blog? Possible? Phillip Rhodes
  • Re: Setting absolute URL for "child" blog? Possible? Dave
  • Re: Setting absolute URL for "child" blog? Possible? Phillip Rhodes
  • Re: Setting absolute URL for "child" blog? Possible? Michael Bien
  • Re: Setting absolute URL for "child" blog? Possible? Phillip Rhodes
• [FINAL CALL] - Travel Assistance to ApacheCon New Orleans 2022 Gavin McDonald
• Final reminder: ApacheCon North America call for presentations closing soon Rich Bowen
• REMINDER - Travel Assistance available for ApacheCon NA New Orleans 2022 Gavin McDonald
• latest spring vulnerability and roller Michael Bien
  • Re: latest spring vulnerability and roller Michael Bien
  • Re: latest spring vulnerability and roller Dave
  • Re: latest spring vulnerability and roller Michael Bien
• Call for Presentations now open, ApacheCon North America 2022 Rich Bowen
• Re-directing blog entries sharanf
  • Re: Re-directing blog entries Michael Bien
  • Re: Re-directing blog entries Sharan Foga
  • Re: Re-directing blog entries Michael Bien
• Errors upgrading to 6.1.0 les McCool
  • Re: Errors upgrading to 6.1.0 Michael Bien
  • Re: Errors upgrading to 6.1.0 Michael Bien
• [ANNOUNCEMENT] Apache Roller 6.1.0 release is available Dave
  • [ANNOUNCEMENT] Apache Roller 6.1.0 release is available NAREN
  • Re: [ANNOUNCEMENT] Apache Roller 6.1.0 release is available Dave
  • Re: [ANNOUNCEMENT] Apache Roller 6.1.0 release is available Michael Bien
  • Re: [ANNOUNCEMENT] Apache Roller 6.1.0 release is available Naren
  • Re: [ANNOUNCEMENT] Apache Roller 6.1.0 release is available Michael Bien
• Log4J version NAREN
  • Re: Log4J version Dave
  • Re: Log4J version NAREN
  • Re: Log4J version Dave
  • Re: Log4J version Naren
  • Re: Log4J version Naren
  • Re: Log4J version Michael Bien
  • Re: Log4J version Naren
  • Re: Log4J version Michael Bien
• ApacheCon starts tomorrow! Rich Bowen
• ApacheCon is just 3 weeks away! Rich Bowen
• Fwd: [CVE-2019-0234] Reflected Cross-site Scripting (XSS) Vulnerability Naren
  • Re: Fwd: [CVE-2019-0234] Reflected Cross-site Scripting (XSS) Vulnerability Michael Bien
• CVE-2021-33580: Apache Roller: regex injection leading to DoS Dave
• Apache Roller 6.0.2 release available now Dave
• Can I make the blog Private? Deepak Goel
  • Re: Can I make the blog Private? Dave
• Call for Presentations for ApacheCon 2021 now open Rich Bowen
• Using Roller 6.0.1 from version control and Docker issue Tom Cutter
• Announcing ApacheCon @Home 2020 Rich Bowen
• Apache Roller 6.0.1 release now available Dave
  • Re: Apache Roller 6.0.1 release now available Naren
  • Re: Apache Roller 6.0.1 release now available Dave
  • Re: Apache Roller 6.0.1 release now available Naren
  • Re: Apache Roller 6.0.1 release now available Dave
  • Re: Apache Roller 6.0.1 release now available Naren
  • Re: Apache Roller 6.0.1 release now available Dave
• [Roller6] Server admin error Tommy Pham
• [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Dave
  • Re: [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Swapnil M Mane
  • Re: [Roller6] media files panel Dave
  • Re: [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Dave
  • Re: [Roller6] media files panel Dave
  • Re: [Roller6] media files panel Tommy Pham
  • Re: [Roller6] media files panel Dave
  • Re: [Roller6] media files panel Tommy Pham
• [Roller6] Media Files Directory hierarchy Tommy Pham
  • Re: [Roller6] Media Files Directory hierarchy Dave
  • Re: [Roller6] Media Files Directory hierarchy Tommy Pham
  • Re: [Roller6] Media Files Directory hierarchy Tommy Pham
• [Roller6] issue with Apache httpd 2.4 reverse proxy Tommy Pham
  • Re: [Roller6] issue with Apache httpd 2.4 reverse proxy Tommy Pham
  • Re: [Roller6] issue with Apache httpd 2.4 reverse proxy Tommy Pham
• Roller 6 configuration Page struts error Naren
  • Re: Roller 6 configuration Page struts error Dave
  • Re: Roller 6 configuration Page struts error Naren
  • Re: Roller 6 configuration Page struts error Dave
  • Re: Roller 6 configuration Page struts error Naren
  • Re: Roller 6 configuration Page struts error Dave
  • Re: Roller 6 configuration Page struts error Naren
  • Re: Roller 6 configuration Page struts error Dave
  • Re: Roller 6 configuration Page struts error NAREN
  • Re: Roller 6 configuration Page struts error Dave
• Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Dave
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Dave
  • Re: Roller 6 new install Dave
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
  • Re: Roller 6 new install Tommy Pham
• Call for presentations for ApacheCon North America 2020 now open Rich Bowen
• [ANNOUNCE] TightBlog 3.7 released Glen Mazza
• [ANN] Apache Roller 6.0.0 released Dave
• Re: Roller 5.2.2 Swapnil M Mane
• Request to become contributor Priya Sharma
  • Re: Request to become contributor Swapnil M Mane
  • Request to become contributor Rohit Hukkeri
  • Re: Request to become contributor Aditya Sharma
  • Request to become contributor Anushi Gupta
  • Re: Request to become contributor Anushi Gupta
  • Re: Request to become contributor Swapnil M Mane
  • Request to become Contributor Saurabh Dixit
  • Re: Request to become Contributor Aditya Sharma
• [Updates] Roller Contributors onboarding process Swapnil M Mane
• [ANNOUNCEMENT] Apache Roller 5.2.4 released Dave
• [CVE-2019-0234] Reflected Cross-site Scripting (XSS) Vulnerabiulity in Apache Roller Dave
• [ANNOUNCEMENT] Apache Roller 5.2.3 released Dave
• Roller 5.2.2 login hanging with Williams, David A.
  • Re: Roller 5.2.2 login hanging with Dave
  • RE: Roller 5.2.2 login hanging with Williams, David A.
  • Re: Roller 5.2.2 login hanging with Anil Gangolli
  • RE: Roller 5.2.2 login hanging with Gilvary, Joseph
• ApacheCon North America 2019 Schedule Now Live! Rich Bowen
• Request to Become a Contributor Aditya Sharma
  • Re: Request to Become a Contributor Dave
• Not able to view editor on local setup Aditya Sharma
  • Re: Not able to view editor on local setup Dave
  • Re: Not able to view editor on local setup Aditya Sharma
  • Re: Not able to view editor on local setup Dave
  • Re: Not able to view editor on local setup Aditya Sharma
• 4 Apache Events in 2019: DC Roadshow soon; next up Chicago, Las Vegas, and Berlin! Rich Bowen
• Regarding service request 642986 CVE Request
• CVE Request 642986 for Publication Request CVE Request
  • RE: CVE Request 642986 for Publication Request Jason Pyeron
  • Re: CVE Request 642986 for Publication Request Dave
• Try Roller's new web UI Dave
• Ansible playbook which sets up a Roller instance Kohei Nozaki
  • Re: Ansible playbook which sets up a Roller instance Dave
• [CVE-2018-17198] Server-side Request Forgery (SSRF) and File Enumeration vulnerability in Apache Roller Dave
• [ANNOUNCEMENT] Apache Roller 5.2.2 released Dave
• [ANNOUNCEMENT] Apache Roller 5.2.1 released Dave
• Speakers needed for Apache DC Roadshow Rich Bowen

• Earlier messages