apache2 update for semi-critical "optionsbleed" bug

Glen Willmot gwillmot at gmail.com
Tue Sep 19 14:30:20 UTC 2017


Good morning,

Just curious on when we'll see an update on the apache2 release to version
2.4.28 to patch against the "Optionsbleed" bug detailed by CVE-2017-9798.

More info on the severity of this bug can be seen at:
https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html

Thank you,
Glen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20170919/2ccd286d/attachment.html>


More information about the Ubuntu-devel-discuss mailing list