Security
Security
Multiple vulnerabilities have been found in Apache, the worst of which may result in the loss of secrets.
| Package | www-servers/apache on all architectures |
|---|---|
| Affected versions | < 2.4.27-r1 |
| Unaffected versions | >= 2.4.27-r1 |
The Apache HTTP server is one of the most popular web servers on the Internet.
Multiple vulnerabilities have been discovered in Apache. Please review the referenced CVE identifiers for details.
The Optionsbleed vulnerability can leak arbitrary memory from the server process that may contain secrets. Additionally attackers may cause a Denial of Service condition, bypass authentication, or cause information loss.
There is no known workaround at this time.
All Apache users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.27-r1"