Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian LTS: DLA-3921-1: apache2 regression update
The fixes for CVE-2024-38474 and CVE-2024-39884 introduced two regressions in mod_rewrite and mod_proxy. For Debian 11 bullseye, these problems have been fixed…
SUSE: 2024:3596-1 moderate: apache-commons-io Security Advisory Updates
* bsc#1231298 Cross-References: * CVE-2024-47554
Debian: DSA-5729-2: apache2 regression update
The fixes for CVE-2024-38474 and CVE-2024-39884 introduced two regressions in mod_rewrite and mod_proxy. For the stable distribution (bookworm), these problems…
SUSE: 2024:3061-1 moderate: apache2 Security Advisory Updates
* bsc#1227353 Cross-References: * CVE-2024-39884
SUSE: 2024:2999-1 important: apache2 Security Advisory Updates
* bsc#1227276 * bsc#1227278 Cross-References: * CVE-2024-38473
SUSE: 2024:2997-1 important: apache2 Security Advisory Updates
* bsc#1227276 * bsc#1227278 Cross-References: * CVE-2024-38473
SUSE: 2024:2591-1 important: apache2 Security Advisory Updates
* bsc#1227268 * bsc#1227269 Cross-References: * CVE-2024-38475
SUSE: 2024:2560-1 important: apache2 Security Advisory Updates
* bsc#1227269 Cross-References: * CVE-2024-38476
SUSE: 2024:2299-1 important: apache2-mod_auth_openidc Security Advisory Updates
* bsc#1219911 * bsc#1227261 Cross-References: * CVE-2024-24814
SUSE: 2024:1377-1 moderate: apache-commons-configuration Security Advisory Updates
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
SUSE: 2024:1365-1 moderate: apache-commons-configuration2 Security Advisory Updates
* bsc#1221793 * bsc#1221797 Cross-References: * CVE-2024-29131
Mageia 2024-0070: apache-mod_security-crs security update
A SQL injection bypass (aka PL1 bypass) exists in OWASP ModSecurity Core Rule Set (owasp-modsecurity-crs) through v3.1.0-rc3 via {`a`b} where a is a special fu…
SUSE: 2024:0757-1 important: apache2-mod_auth_openidc
* bsc#1219911 Cross-References: * CVE-2024-24814
SUSE: 2024:0758-1 important: apache2-mod_auth_openidc
* bsc#1219911 Cross-References: * CVE-2024-24814
SUSE: 2024:0224-1 important: apache-parent, apache-sshd
* bsc#1205463 * bsc#1218189 Cross-References: * CVE-2022-45047
RedHat: RHSA-2023-4629:01 Moderate: Red Hat JBoss Core Services Apache HTTP
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vu…
Mageia 2023-0070: apache-commons-fileupload security update
Denial of service with a malicious upload or series of uploads. (CVE-2023-24998) References: - https://bugs.mageia.org/show_bug.cgi?id=31580
SUSE: 2022:4488-1 moderate: apache2-mod_wsgi
An update that fixes one vulnerability is now available.
RedHat: RHSA-2022-8840:01 Moderate: Red Hat JBoss Core Services Apache HTTP
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vu…
RedHat: RHSA-2022-8841:01 Important: Red Hat JBoss Core Services Apache
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
SUSE: 2022:4010-1 moderate: apache2-mod_wsgi
An update that fixes one vulnerability is now available.
RedHat: RHSA-2022-7143:01 Important: Red Hat JBoss Core Services Apache
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
RedHat: RHSA-2022-7144:01 Important: Red Hat JBoss Core Services Apache
An update is now available for Red Hat JBoss Core Services. Red Hat Product Security has rated this update as having a security impact of Important. A Common V…
SUSE: 2022:2342-1 important: apache2
An update that fixes 7 vulnerabilities is now available.