Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
cd5d1be3 by Salvatore Bonaccorso at 2024-04-04T22:17:33+02:00
Add apache2 references for issues fixed in 2.4.59
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -264,13 +264,16 @@ CVE-2024-26745 (In the Linux kernel, the following
vulnerability has been resolv
CVE-2024-24795 (HTTP Response splitting in multiple modules in Apache HTTP
Server allo ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/5
+ NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795
CVE-2023-38709 (Faulty input validation in the core of Apache allows malicious
or expl ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/3
+ NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709
CVE-2024-27316 (HTTP/2 incoming headers exceeding the limit are temporarily
buffered i ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.kb.cert.org/vuls/id/421644
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/4
+ NOTE:
https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-27316
CVE-2024-3296 (A timing-based side-channel exists in the rust-openssl package,
which ...)
- rust-openssl <unfixed> (bug #1068418)
NOTE: https://github.com/sfackler/rust-openssl/issues/2171
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
