[Git][security-tracker-team/security-tracker][master] Add apache2 references for issues fixed in 2.4.59
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Thu Apr 4 21:18:11 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
cd5d1be3 by Salvatore Bonaccorso at 2024-04-04T22:17:33+02:00
Add apache2 references for issues fixed in 2.4.59
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -264,13 +264,16 @@ CVE-2024-26745 (In the Linux kernel, the following vulnerability has been resolv
CVE-2024-24795 (HTTP Response splitting in multiple modules in Apache HTTP Server allo ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/5
+ NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-24795
CVE-2023-38709 (Faulty input validation in the core of Apache allows malicious or expl ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/3
+ NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2023-38709
CVE-2024-27316 (HTTP/2 incoming headers exceeding the limit are temporarily buffered i ...)
- apache2 <unfixed> (bug #1068412)
NOTE: https://www.kb.cert.org/vuls/id/421644
NOTE: https://www.openwall.com/lists/oss-security/2024/04/04/4
+ NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-27316
CVE-2024-3296 (A timing-based side-channel exists in the rust-openssl package, which ...)
- rust-openssl <unfixed> (bug #1068418)
NOTE: https://github.com/sfackler/rust-openssl/issues/2171
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/cd5d1be3009565ecf64cfc41b9f20350a0a71450
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240404/3a301403/attachment.htm>
More information about the debian-security-tracker-commits
mailing list