Security
Security
Multiple vulnerabilities have been found in Apache, the worst of which could allow HTTP request smuggling attacks or a Denial of Service condition.
| Package | www-servers/apache on all architectures |
|---|---|
| Affected versions | < 2.4.23 |
| Unaffected versions | revision >= 2.2.31 >= 2.4.23 |
Apache HTTP Server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.
Remote attackers could bypass intended access restrictions, conduct HTTP request smuggling attacks, or cause a Denial of Service condition.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.23"