Re: Is apache24-2.4.54 vulnerable ?
moto kawasaki <[email protected]>
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Message-ID | <[email protected]> |
Hi ISHIZUKA san, It seems like true for apache24-2.4.53 and prior, and fixed version is ...2.4.54. See also Apache httpd's Security Reports page: https://httpd.apache.org/security/vulnerabilities_24.html Thanks. -- moto kawasaki <[email protected]> on Fri, 10 Jun 2022 08:15:07 +0900 (JST), Masachika ISHIZUKA <[email protected]> wrote: > % uname -a > FreeBSD peach.ish.org 13.1-RELEASE FreeBSD 13.1-RELEASE releng/13.1-n250148-fc952ac2212 GENERIC amd64 > % pkg audit -F > vulnxml file up-to-date > apache24-2.4.54 is vulnerable: > Apache httpd -- Multiple vulnerabilities > CVE: CVE-2022-26377 > CVE: CVE-2022-28330 > CVE: CVE-2022-28614 > CVE: CVE-2022-28615 > CVE: CVE-2022-29404 > CVE: CVE-2022-30522 > CVE: CVE-2022-30556 > CVE: CVE-2022-31813 > WWW: https://vuxml.FreeBSD.org/freebsd/49adfbe5-e7d1-11ec-8fbd-d4c9ef517024.html > 1 problem(s) in 1 installed package(s) found. > > Is this report true for apache24-2.4.54 ? > -- > Masachika ISHIZUKA >