(httpd-site) branch asf-site updated: Automatic Site Publish by Buildbot
[email protected] Thu, 04 Jun 2026 16:28:25 +0000
| Newsgroups | gmane.comp.apache.cvs |
|---|---|
| Message-ID | <178059050554.1983801.13475354811653637871@gitbox3-he-fi.apache.org> |
This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/httpd-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new f7211bb Automatic Site Publish by Buildbot
f7211bb is described below
commit f7211bbe7a58928678cdba480d0dbe93152a4fb5
Author: buildbot <[email protected]>
AuthorDate: Thu Jun 4 16:28:21 2026 +0000
Automatic Site Publish by Buildbot
---
output/security/json/CVE-2026-34032.json | 228 ++++++++++++++++-------------
output/security/vulnerabilities-httpd.json | 136 +++++++++--------
output/security/vulnerabilities_24.html | 12 --
3 files changed, 204 insertions(+), 172 deletions(-)
diff --git a/output/security/json/CVE-2026-34032.json b/output/security/json/CVE-2026-34032.json
index e6b1d45..9517c74 100644
--- a/output/security/json/CVE-2026-34032.json
+++ b/output/security/json/CVE-2026-34032.json
@@ -1,108 +1,130 @@
{
- "containers": {
- "cna": {
- "affected": [
- {
- "defaultStatus": "unaffected",
- "product": "Apache HTTP Server",
- "vendor": "Apache Software Foundation",
- "versions": [
- {
- "lessThanOrEqual": "2.4.66",
- "status": "affected",
- "version": "0",
- "versionType": "semver"
- }
- ]
- }
- ],
- "credits": [
- {
- "lang": "en",
- "type": "finder",
- "value": "Tianshuo Han (<[email protected]>)"
- },
- {
- "lang": "en",
- "type": "finder",
- "value": "Jérôme Djouder"
- }
- ],
- "descriptions": [
- {
- "lang": "en",
- "supportingMedia": [
- {
- "base64": false,
- "type": "text/html",
- "value": "<p>Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.</p><p>This issue affects Apache HTTP Server: through 2.4.66.</p><p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p>"
- }
- ],
- "value": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
- }
- ],
- "metrics": [
- {
- "other": {
- "content": {
- "text": "low"
+ "cveMetadata": {
+ "cveId": "CVE-2026-34032",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "CNA_private": {
+ "emailed": "yes",
+ "projecturl": "https://httpd.apache.org/",
+ "owner": "httpd",
+ "userslist": "[email protected]",
+ "state": "PUBLIC",
+ "todo": [],
+ "type": "unsure"
+ },
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
},
- "type": "Textual description of severity"
- }
- }
- ],
- "problemTypes": [
- {
- "descriptions": [
- {
- "cweId": "CWE-170",
- "description": "CWE-170 Improper Null Termination",
- "lang": "en",
- "type": "CWE"
- }
- ]
- },
- {
- "descriptions": [
- {
- "cweId": "CWE-125",
- "description": "CWE-125 Out-of-bounds Read",
- "lang": "en",
- "type": "CWE"
+ "title": "mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-170 Improper Null Termination",
+ "lang": "en",
+ "cweId": "CWE-170",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-125 Out-of-bounds Read",
+ "lang": "en",
+ "cweId": "CWE-125",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache HTTP Server",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.4.66",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.</p><p>This issue affects Apache HTTP Server: through 2.4.66.</p><p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-03-01T02:27:00.000Z",
+ "lang": "en",
+ "value": "Report received"
+ },
+ {
+ "time": "2026-05-04T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 2.4.x by r1933343"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Tianshuo Han (<[email protected]>)",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Jérôme Djouder",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Sajeeb Lohani working with TrendAI Zero Day Initiative",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
}
- ]
- }
- ],
- "providerMetadata": {
- "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
- },
- "source": {
- "discovery": "UNKNOWN"
- },
- "timeline": [
- {
- "lang": "en",
- "time": "2026-03-01T02:27:00.000Z",
- "value": "Report received"
- },
- {
- "lang": "eng",
- "time": "2026-05-04",
- "value": "2.4.67 released"
}
- ],
- "title": "Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)",
- "x_generator": {
- "engine": "Vulnogram 0.2.0"
- }
- }
- },
- "cveMetadata": {
- "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
- "cveId": "CVE-2026-34032",
- "serial": 1,
- "state": "PUBLISHED"
- },
- "dataType": "CVE_RECORD",
- "dataVersion": "5.1"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
}
diff --git a/output/security/vulnerabilities-httpd.json b/output/security/vulnerabilities-httpd.json
index b555265..6d85781 100644
--- a/output/security/vulnerabilities-httpd.json
+++ b/output/security/vulnerabilities-httpd.json
@@ -24364,110 +24364,132 @@
}
},
{
+ "cveMetadata": {
+ "cveId": "CVE-2026-34032",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "CNA_private": {
+ "emailed": "yes",
+ "projecturl": "https://httpd.apache.org/",
+ "owner": "httpd",
+ "userslist": "[email protected]",
+ "state": "PUBLIC",
+ "todo": [],
+ "type": "unsure"
+ },
"containers": {
"cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-170 Improper Null Termination",
+ "lang": "en",
+ "cweId": "CWE-170",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-125 Out-of-bounds Read",
+ "lang": "en",
+ "cweId": "CWE-125",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
"affected": [
{
- "defaultStatus": "unaffected",
- "product": "Apache HTTP Server",
"vendor": "Apache Software Foundation",
+ "product": "Apache HTTP Server",
"versions": [
{
- "lessThanOrEqual": "2.4.66",
"status": "affected",
"version": "0",
+ "lessThanOrEqual": "2.4.66",
"versionType": "semver"
}
- ]
- }
- ],
- "credits": [
- {
- "lang": "en",
- "type": "finder",
- "value": "Tianshuo Han (<[email protected]>)"
- },
- {
- "lang": "en",
- "type": "finder",
- "value": "J\u00e9r\u00f4me Djouder"
+ ],
+ "defaultStatus": "unaffected"
}
],
"descriptions": [
{
+ "value": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.",
"lang": "en",
"supportingMedia": [
{
- "base64": false,
"type": "text/html",
+ "base64": false,
"value": "<p>Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.</p><p>This issue affects Apache HTTP Server: through 2.4.66.</p><p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p>"
}
- ],
- "value": "Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.\n\nThis issue affects Apache HTTP Server: through 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue."
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
+ "tags": [
+ "vendor-advisory"
+ ]
}
],
"metrics": [
{
"other": {
+ "type": "Textual description of severity",
"content": {
"text": "low"
- },
- "type": "Textual description of severity"
+ }
}
}
],
- "problemTypes": [
+ "timeline": [
{
- "descriptions": [
- {
- "cweId": "CWE-170",
- "description": "CWE-170 Improper Null Termination",
- "lang": "en",
- "type": "CWE"
- }
- ]
+ "time": "2026-03-01T02:27:00.000Z",
+ "lang": "en",
+ "value": "Report received"
},
{
- "descriptions": [
- {
- "cweId": "CWE-125",
- "description": "CWE-125 Out-of-bounds Read",
- "lang": "en",
- "type": "CWE"
- }
- ]
+ "time": "2026-05-04T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 2.4.x by r1933343"
}
],
- "providerMetadata": {
- "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
- },
- "source": {
- "discovery": "UNKNOWN"
- },
- "timeline": [
+ "credits": [
{
"lang": "en",
- "time": "2026-03-01T02:27:00.000Z",
- "value": "Report received"
+ "value": "Tianshuo Han (<[email protected]>)",
+ "type": "finder"
},
{
- "lang": "eng",
- "time": "2026-05-04",
- "value": "2.4.67 released"
+ "lang": "en",
+ "value": "J\u00e9r\u00f4me Djouder",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Sajeeb Lohani working with TrendAI Zero Day Initiative",
+ "type": "finder"
}
],
- "title": "Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
- "cveMetadata": {
- "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
- "cveId": "CVE-2026-34032",
- "serial": 1,
- "state": "PUBLISHED"
- },
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
},
diff --git a/output/security/vulnerabilities_24.html b/output/security/vulnerabilities_24.html
index 570cfd9..bfb0a95 100644
--- a/output/security/vulnerabilities_24.html
+++ b/output/security/vulnerabilities_24.html
@@ -192,18 +192,6 @@ h1:hover > .headerlink, h2:hover > .headerlink, h3:hover > .headerlink, h4:hover
<tr><td class="cve-header">Update 2.4.67 released</td><td class="cve-value">2026-05-04</td></tr>
<tr><td class="cve-header">Affects</td><td class="cve-value"> through 2.4.66</td></tr>
</table></dd>
-<dt><h3 id="CVE-2026-34032">low: <name name="CVE-2026-34032">Apache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)</name>
-(<a href="https://www.cve.org/CVERecord?id=CVE-2026-34032">CVE-2026-34032</a>)</h3></dt>
-<dd><p>Improper Null Termination, Out-of-bounds Read vulnerability in Apache HTTP Server.</p><p></p><p>This issue affects Apache HTTP Server: through 2.4.66.</p><p></p><p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p>
-<p>Acknowledgements:</p>
-<ul>
-<li>finder: Tianshuo Han (<[email protected]>)</li>
-<li>finder: Jérôme Djouder</li>
-</ul>
-<table class="table"><tr><td class="cve-header">Report received</td><td class="cve-value">2026-03-01</td></tr>
-<tr><td class="cve-header">Update 2.4.67 released</td><td class="cve-value">2026-05-04</td></tr>
-<tr><td class="cve-header">Affects</td><td class="cve-value"> through 2.4.66</td></tr>
-</table></dd>
<dt><h3 id="CVE-2026-34059">low: <name name="CVE-2026-34059">Apache HTTP Server: mod_proxy_ajp: Heap Over-Read and memory disclosure in ajp_parse_data()</name>
(<a href="https://www.cve.org/CVERecord?id=CVE-2026-34059">CVE-2026-34059</a>)</h3></dt>
<dd><p>Buffer Over-read vulnerability in Apache HTTP Server.</p><p></p><p>This issue affects Apache HTTP Server: through 2.4.66.</p><p></p><p>Users are recommended to upgrade to version 2.4.67, which fixes the issue.</p>