enterprise-support team mailing list archive

Thread
Date

Re: [Question #809178]: Apache2 2.4.57

To: enterprise-support@xxxxxxxxxxxxxxxxxxx
From: Manfred Hampl <question809178@xxxxxxxxxxxxxxxxxxxxx>
Date: Fri, 12 Apr 2024 18:12:57 -0000
Reply-to: question809178@xxxxxxxxxxxxxxxxxxxxx
Sender: noreply@xxxxxxxxxxxxx

Question #809178 on apache2 in Ubuntu changed:
https://answers.launchpad.net/ubuntu/+source/apache2/+question/809178

    Status: Open => Answered

Manfred Hampl proposed the following answer:
https://ubuntu.com/security/notices/USN-6506-1 tells that
CVE-2023-45802, CVE-2023-31122 and CVE-2023-43622 are dealt with by
version 2.4.52-1ubuntu4.7 in Ubuntu 22.04.

Remark: Recently new CVEs have been discovered (CVE-2023-38709, CVE-2024-24795, CVE-2024-27316); for Ubuntu 22.04 they will be covered with apache2 version 2.4.52-1ubuntu4.9 (currently work in progress). More updates will be necessary whenever new vulnerabilities will be detected.
(For apache2 in Ubuntu 18.04 the status of these vulnerabilities also is "needs triage".)

-- 
You received this question notification because your team Ubuntu
Server/Client Support Team is an answer contact for apache2 in Ubuntu.