Apache on StackRef Whistlehttps://whistle.stackref.com/tags/apache/Recent content in Apache on StackRef WhistleHugoen-usThu, 22 Oct 2026 03:00:00 -0400The Whistle: Special Bulletin - mTLS bypasses in Traffic Server and Traefikhttps://whistle.stackref.com/post/2026-10-22-cve-bulletin-ats-traefik-trust/Thu, 22 Oct 2026 03:00:00 -0400https://whistle.stackref.com/post/2026-10-22-cve-bulletin-ats-traefik-trust/<p>A short alert between digests: Traffic Server&rsquo;s Tuesday release fixes fifteen flaws and two of them hand out the wrong client certificate identity; Traefik patched a second connection-identity bug in the same month on related plumbing; and Red Hat is pulling two roots out of its system CA bundle over the eMudhra key leak. mTLS origins, meet your change window.</p>