[Git][security-tracker-team/security-tracker][master] Add apache2 references for issues fixed in 2.4.59

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Apr 4 21:18:11 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
cd5d1be3 by Salvatore Bonaccorso at 2024-04-04T22:17:33+02:00
Add apache2 references for issues fixed in 2.4.59

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -264,13 +264,16 @@ CVE-2024-26745 (In the Linux kernel, the following vulnerability has been resolv
 CVE-2024-24795 (HTTP Response splitting in multiple modules in Apache HTTP Server allo ...)
 	- apache2 <unfixed> (bug #1068412)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/5
+	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795
 CVE-2023-38709 (Faulty input validation in the core of Apache allows malicious or expl ...)
 	- apache2 <unfixed> (bug #1068412)
 	NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/3
+	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709
 CVE-2024-27316 (HTTP/2 incoming headers exceeding the limit are temporarily buffered i ...)
 	- apache2 <unfixed> (bug #1068412)
 	NOTE: https://www.kb.cert.org/vuls/id/421644
 	NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/4
+	NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-27316
 CVE-2024-3296 (A timing-based side-channel exists in the rust-openssl package, which  ...)
 	- rust-openssl <unfixed> (bug #1068418)
 	NOTE: https://github.com/sfackler/rust-openssl/issues/2171



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240404/3a301403/attachment.htm>


More information about the debian-security-tracker-commits mailing list