{"id":"CLSA-2024-1724788546","summary":"Fix of 5 CVEs","details":"   * SECURITY UPDATE: http server use exploitable/malicious backend application\n     - debian/patches/CVE-2024-38476.patch: prevent server usage of\n       exploitable/malicious backend application output to run local\n       handlers via internal redirect\n     - CVE-2024-38476\n   * SECURITY UPDATE: modules regression introduced by CVE-2024-38476 fix\n     - debian/patches/CVE-2024-39884.patch: source code disclosure with\n       handlers configured via AddType. Resolving regression introduced\n       by CVE-2024-38476 fix\n     - CVE-2024-39884\n   * SECURITY UPDATE: modules regression introduced by CVE-2024-39884 fix\n     - debian/patches/CVE-2024-40725.patch: source code disclosure with\n       handlers configured via AddType. Resolving regression introduced\n       by CVE-2024-39884 fix\n     - CVE-2024-40725\n   * SECURITY UPDATE: attacker allowed to execute scripts in directories\n     permitted by the configuration but not directly reachable by any URL\n     or source disclosure of scripts meant to only to be executed as CGI\n     - debian/patches/CVE-2024-38474-38475.patch: server weakness with\n       encoded question marks in backreferences\n     - CVE-2024-38474\n     - debian/patches/CVE-2024-38474-38475.patch: server weakness in\n       mod_rewrite when first segment of substitution matches\n       filesystem path\n     - CVE-2024-38475","modified":"2026-06-04T10:03:14.034445387Z","published":"2024-08-27T19:55:49Z","upstream":["CVE-2024-38474","CVE-2024-38475","CVE-2024-38476","CVE-2024-39884","CVE-2024-40725"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18-els/CLSA-2024-1724788546.html"}],"affected":[{"package":{"name":"apache2","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-bin","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-bin?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-data","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-data?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-doc","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-doc?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-ssl-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-ssl-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-suexec-custom","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-suexec-custom?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-suexec-pristine","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-suexec-pristine?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}},{"package":{"name":"apache2-utils","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/apache2-utils?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.29-1ubuntu4.27+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2024-1724788546.json"}}],"schema_version":"1.7.5"}