tocsin

Alpine/apache2: critical 9.8

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

Action: Upgrade apache2 to 2.4.26-r0 or later.

Affected

introducedfixedlast affected
02.4.26-r0-

Fixed versions

2.4.26-r0

Sources

published · modified · JSON