tocsin

Alpine/apache2: critical 9.8

In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster o

Action: Upgrade apache2 to 2.4.33-r0 or later.

Affected

introducedfixedlast affected
02.4.33-r0-

Fixed versions

2.4.33-r0

Sources

published · modified · JSON