Alpine/apache2: critical 9.1
A path handling issue in mod_dav_fs in Apache 2.4.67 and earlier allows a WebDAV content author to directly manipulate trusted DAV property databases, potentially causing child process crashes.
Action: Upgrade apache2 to 2.4.68-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.68-r0 | - |
Fixed versions
| 2.4.68-r0 |
Sources
- osv: ALPINE-CVE-2026-42535#Alpine:v3.24/apache2
- https://security.alpinelinux.org/vuln/CVE-2026-42535
published · modified · JSON