Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker
Commits: d2b23fa7 by Bastien Roucariès at 2024-08-20T22:54:09+00:00 CVE-2024-38474/CVE-2024-38475 Regression Track regression - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -12252,18 +12252,22 @@ CVE-2024-38475 (Improper escaping of output in mod_rewrite in Apache HTTP Server - apache2 2.4.60-1 NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38475 NOTE: same fix as CVE-2024-28474 - NOTE: Fixed by https://github.com/apache/httpd/commit/1feb5e04a4f7b5f3f13cd40f9635144319dcf24a - NOTE: Need also log fix https://github.com/apache/httpd/commit/4797330ad813d9f8a2bb1b3b8d03ceb523dc4884 - NOTE: Regression will need https://github.com/apache/httpd/commit/a1a93beb58b81f1de2b713ae5f96c41ed5952a74 + NOTE: Fixed [1/2] https://github.com/apache/httpd/commit/1feb5e04a4f7b5f3f13cd40f9635144319dcf24a + NOTE: need also log fix [2/2] https://github.com/apache/httpd/commit/4797330ad813d9f8a2bb1b3b8d03ceb523dc4884 + NOTE: regression: bug https://bz.apache.org/bugzilla/show_bug.cgi?id=69197 + NOTE: regression: tracked at https://bugs.debian.org/1079172 + NOTE: regression: commit likely https://github.com/apache/httpd/commit/a1a93beb58b81f1de2b713ae5f96c41ed5952a74 NOTE: (or https://svn.apache.org/viewvc?view=revision&revision=1918561) CVE-2024-38474 (Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.5 ...) {DSA-5729-1} - apache2 2.4.60-1 NOTE: https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2024-38474 NOTE: same fix as CVE-2024-28475 - NOTE: Fixed by https://github.com/apache/httpd/commit/1feb5e04a4f7b5f3f13cd40f9635144319dcf24a - NOTE: need also log fix https://github.com/apache/httpd/commit/4797330ad813d9f8a2bb1b3b8d03ceb523dc4884 - NOTE: regression will need https://github.com/apache/httpd/commit/a1a93beb58b81f1de2b713ae5f96c41ed5952a74 + NOTE: Fixed [1/2] https://github.com/apache/httpd/commit/1feb5e04a4f7b5f3f13cd40f9635144319dcf24a + NOTE: need also log fix [2/2] https://github.com/apache/httpd/commit/4797330ad813d9f8a2bb1b3b8d03ceb523dc4884 + NOTE: regression: bug https://bz.apache.org/bugzilla/show_bug.cgi?id=69197 + NOTE: regression: tracked at https://bugs.debian.org/1079172 + NOTE: regression: commit likely https://github.com/apache/httpd/commit/a1a93beb58b81f1de2b713ae5f96c41ed5952a74 NOTE: (or https://svn.apache.org/viewvc?view=revision&revision=1918561) CVE-2024-38473 (Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier ...) {DSA-5729-1} @@ -12278,7 +12282,7 @@ CVE-2024-38473 (Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and e NOTE: Regression [1/2] bug apache: https://bz.apache.org/bugzilla/show_bug.cgi?id=69160 NOTE: Regression [1/2] related to https://bugs.launchpad.net/ubuntu/+source/apache2/+bug/2073515 NOTE: Regression [1/2] tracked at debian bug: https://bugs.debian.org/1076554 - NOTE: Fix of Regression [1/2] https://github.com/apache/httpd/commit/2f2f82a2225c5c3b6bb2fa4056541682e34763d4 + NOTE: Regression [1/2] Fix: https://github.com/apache/httpd/commit/2f2f82a2225c5c3b6bb2fa4056541682e34763d4 NOTE: Regression [2/2] bug apache: https://bz.apache.org/bugzilla/show_bug.cgi?id=69203 NOTE: Regression [2/2] tracked at https://bugs.debian.org/1079171 CVE-2024-38472 (SSRF in Apache HTTP Server on Windows allows to potentially leak NTML ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2b23fa797e0547e9502369fb37e7118f9c06d71 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d2b23fa797e0547e9502369fb37e7118f9c06d71 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits