UbuntuUpdates.org

Package "apache2"

Name: apache2

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Apache HTTP Server configurable suexec program for mod_suexec
  • Apache HTTP Server standard suexec program for mod_suexec
Latest version: 2.4.62-1ubuntu1.1
Release: oracular (24.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "apache2" in Oracular

Repository Area Version
base universe 2.4.62-1ubuntu1
base main 2.4.62-1ubuntu1
security main 2.4.62-1ubuntu1.1
updates main 2.4.62-1ubuntu1.1
updates universe 2.4.62-1ubuntu1.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 2.4.62-1ubuntu1.1 2025-04-07 12:07:15 UTC

  apache2 (2.4.62-1ubuntu1.1) oracular-security; urgency=medium

  * SECURITY REGRESSION: Better question mark tracking
    - debian/patches/CVE-2024-38474-regression.patch: improve
      previous patch allowing to avoid [UnsafeAllow3F] for most
      cases in modules/mappers/mod_rewrite.c (LP: #2103723).

 -- Leonidas Da Silva Barbosa <email address hidden> Thu, 03 Apr 2025 06:16:23 -0300
2103723 Fix for CVE-2024-38474 also blocks %3f in appended query strings
CVE-2024-38474 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by th


About   -   Send Feedback to @ubuntu_updates