tocsin

Alpine/apache2: high 7.5

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbl

Action: Upgrade apache2 to 2.4.27-r1 or later.

Affected

introducedfixedlast affected
02.4.27-r1-

Fixed versions

2.4.27-r1

Sources

published · modified · JSON