<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:remialcxesans;}
@font-face
{font-family:template-fn9f9wmsEeyYHwANOhMHOw;}
@font-face
{font-family:zone-1;}
@font-face
{font-family:zones-AQ;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-ligatures:none;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1027" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I was wondering on when you plan to upgrade Apache from 2.4.55 to at least 2.4.56 to address the vulnerabilities with Apache?<o:p></o:p></p>
<p class="MsoNormal">We have been checking weekly for a number of months now.<o:p></o:p></p>
<p class="MsoNormal">Changes with Apache 2.4.56<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> *) SECURITY: CVE-2023-27522: Apache HTTP Server: mod_proxy_uwsgi<o:p></o:p></p>
<p class="MsoNormal"> HTTP response splitting (cve.mitre.org)<o:p></o:p></p>
<p class="MsoNormal"> HTTP Response Smuggling vulnerability in Apache HTTP Server via<o:p></o:p></p>
<p class="MsoNormal"> mod_proxy_uwsgi. This issue affects Apache HTTP Server: from<o:p></o:p></p>
<p class="MsoNormal"> 2.4.30 through 2.4.55.<o:p></o:p></p>
<p class="MsoNormal"> Special characters in the origin response header can<o:p></o:p></p>
<p class="MsoNormal"> truncate/split the response forwarded to the client.<o:p></o:p></p>
<p class="MsoNormal"> Credits: Dimas Fariski Setyawan Putra (nyxsorcerer)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> *) SECURITY: CVE-2023-25690: HTTP request splitting with<o:p></o:p></p>
<p class="MsoNormal"> mod_rewrite and mod_proxy (cve.mitre.org)<o:p></o:p></p>
<p class="MsoNormal"> Some mod_proxy configurations on Apache HTTP Server versions<o:p></o:p></p>
<p class="MsoNormal"> 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.<o:p></o:p></p>
<p class="MsoNormal"> Configurations are affected when mod_proxy is enabled along with<o:p></o:p></p>
<p class="MsoNormal"> some form of RewriteRule or ProxyPassMatch in which a non-specific<o:p></o:p></p>
<p class="MsoNormal"> pattern matches some portion of the user-supplied request-target (URL)<o:p></o:p></p>
<p class="MsoNormal"> data and is then re-inserted into the proxied request-target<o:p></o:p></p>
<p class="MsoNormal"> using variable substitution. For example, something like:<o:p></o:p></p>
<p class="MsoNormal"> RewriteEngine on<o:p></o:p></p>
<p class="MsoNormal"> RewriteRule "^/here/(.*)" "http://example.com:8080/elsewhere?$1"; [P]<o:p></o:p></p>
<p class="MsoNormal"> ProxyPassReverse /here/ http://example.com:8080/<o:p></o:p></p>
<p class="MsoNormal"> Request splitting/smuggling could result in bypass of access<o:p></o:p></p>
<p class="MsoNormal"> controls in the proxy server, proxying unintended URLs to<o:p></o:p></p>
<p class="MsoNormal"> existing origin servers, and cache poisoning.<o:p></o:p></p>
<p class="MsoNormal"> Credits: Lars Krapf of Adobe<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td style="border:none;border-right:solid #015A9C 1.5pt;padding:0in 7.5pt 0in 0in">
<p class="MsoNormal"><!--[if gte vml 1]><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="AutoShape_x0020_10" o:spid="_x0000_s1026" type="#_x0000_t75" style='position:absolute;margin-left:0;margin-top:0;width:50pt;height:50pt;z-index:251659264;visibility:hidden;mso-width-percent:0;mso-height-percent:0;mso-wrap-distance-left:9pt;mso-wrap-distance-top:0;mso-wrap-distance-right:9pt;mso-wrap-distance-bottom:0;mso-position-horizontal:absolute;mso-position-horizontal-relative:text;mso-position-vertical:absolute;mso-position-vertical-relative:text;mso-width-percent:0;mso-height-percent:0;mso-width-relative:page;mso-height-relative:page'>
<o:lock v:ext="edit" aspectratio="f" selection="t" />
</v:shape><![endif]--><span style="font-size:1.0pt"><img width="80" height="80" style="width:.8333in;height:.8333in" id="Picture_x0020_1" src="cid:image001.jpg@01D9E186.60BF0920"><o:p></o:p></span></p>
</td>
<td style="padding:7.5pt 0in 7.5pt 7.5pt">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 1.5pt 0in">
<p class="MsoNormal"><b><span style="font-size:15.0pt;color:#005B9F">Daniel Johnston</span></b><b><span style="font-size:1.0pt;font-family:remialcxesans;color:white"></span></b><b><span style="font-size:1.0pt;font-family:template-fn9f9wmsEeyYHwANOhMHOw;color:white"></span></b><b><span style="font-size:1.0pt;font-family:zone-1;color:white"></span></b><b><span style="font-size:1.0pt;font-family:zones-AQ;color:white"></span></b><b><span style="font-size:15.0pt;color:#005B9F"><o:p></o:p></span></b></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><span style="color:#005B9F">IT Systems Administrator<o:p></o:p></span></b></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"> | <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><i><span style="color:#005B9F">Premier Credit Union<o:p></o:p></span></i></b></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 3.75pt 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:2.25pt 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt;color:#005B9F"><img width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_2" src="cid:image002.png@01D9E186.60BF0920"><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"><a href="tel:515-245-3541" target="_blank"><span style="color:#005B9F;text-decoration:none">515-245-3541</span></a><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"> | <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt;color:#005B9F"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_3" src="cid:image003.png@01D9E186.60BF0920"><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"><a href="mailto:danielj@premiercu.org" target="_blank"><span style="color:#005B9F;text-decoration:none">danielj@premiercu.org</span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 2.25pt 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_4" src="cid:image004.png@01D9E186.60BF0920"><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 3.75pt 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"><a href="https://www.premiercu.org/" target="_blank" title="PremierCU.org"><span style="color:#005B9F;text-decoration:none">www.PremierCU.org</span></a><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 2.25pt 2.25pt 3.75pt">
<p class="MsoNormal"><a href="https://www.facebook.com/PremierCreditUnion/" target="_blank"><span style="font-size:1.0pt;color:blue;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_5" src="cid:image005.png@01D9E186.60BF0920"></span></a><span style="font-size:1.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 2.25pt 2.25pt 2.25pt">
<p class="MsoNormal"><a href="https://twitter.com/premiercu" target="_blank"><span style="font-size:1.0pt;color:blue;text-decoration:none"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_6" src="cid:image006.png@01D9E186.60BF0920"></span></a><span style="font-size:1.0pt"><o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 2.25pt 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="font-size:1.0pt"><img border="0" width="20" height="20" style="width:.2083in;height:.2083in" id="Picture_x0020_7" src="cid:image007.png@01D9E186.60BF0920"><o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0">
<tbody>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">800 9th St<o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">, <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">Des Moines<o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">, <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">Iowa<o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F"> <o:p></o:p></span></p>
</td>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><span style="color:#005B9F">50309<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><b><i><span style="color:#1DA1F2"><a href="https://www.google.com/search?q=premier%20credit%20union%20iowa&oq=pre&aqs=edge.1.69i60j69i59j69i57j69i65l3j69i64j69i60.1812j0j1&sourceid=chrome&ie=UTF-8&tbs=lrf:!1m4!1u3!2m2!3m1!1e1!2m1!1e3!3sIAE,lf:1,lf_ui:4&tbm=lcl&sxsrf=AJOqlzXrvCL3bZvWYPIkdsyB1EaIVMvANA:1674676176884&rflfq=1&num=10&rldimm=3124682254401017333&lqi=ChlwcmVtaWVyIGNyZWRpdCB1bmlvbiBpb3dhIgOIAQFIjvPOuqaugIAIWjMQABABEAIYABgBGAIYAyIZcHJlbWllciBjcmVkaXQgdW5pb24gaW93YSoICAIQABABEAKSARVmaW5hbmNpYWxfaW5zdGl0dXRpb26aASNDaFpEU1VoTk1HOW5TMFZKUTBGblNVTnRlbVpUWjFsUkVBRaoBPRABGh8QASIbRcUtPvG9ipyn7BPbtEp9sUYAsaNggU881hGLKhgiFHByZW1pZXIgY3JlZGl0IHVuaW9uKADgAQA&ved=2ahUKEwiD-Iv1vuP8AhXRlIkEHUE1AMUQvS56BAgUEAE&sa=X&rlst=f&safe=active&ssui=on#rlfi=hd:;si:3124682254401017333,l,ChlwcmVtaWVyIGNyZWRpdCB1bmlvbiBpb3dhIgOIAQFIjvPOuqaugIAIWjMQABABEAIYABgBGAIYAyIZcHJlbWllciBjcmVkaXQgdW5pb24gaW93YSoICAIQABABEAKSARVmaW5hbmNpYWxfaW5zdGl0dXRpb26aASNDaFpEU1VoTk1HOW5TMFZKUTBGblNVTnRlbVpUWjFsUkVBRaoBPRABGh8QASIbRcUtPvG9ipyn7BPbtEp9sUYAsaNggU881hGLKhgiFHByZW1pZXIgY3JlZGl0IHVuaW9uKADgAQA;mv:[[42.0533971,-93.61367969999999],[41.553990399999996,-93.7275892]];tbs:lrf:!1m4!1u3!2m2!3m1!1e1!2m1!1e3!3sIAE,lf:1,lf_ui:4" target="_blank"><span style="color:#1DA1F2;text-decoration:none">Leave us a Review on Google!</span></a><o:p></o:p></span></i></b></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<p class="MsoNormal"><a href="https://premiercu.org/high-yield-checking/" target="_blank"><span style="font-size:1.0pt;color:blue;text-decoration:none"><img border="0" width="320" height="150" style="width:3.3333in;height:1.5625in" id="Picture_x0020_8" src="cid:image008.jpg@01D9E186.60BF0920"></span></a><span style="font-size:1.0pt"><o:p></o:p></span></p>
</td>
</tr>
<tr>
<td valign="top" style="padding:0in 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td valign="top" style="padding:6.0pt 0in 0in 0in">
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="100%" style="width:100.0%">
<tbody>
<tr>
<td style="padding:0in 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt;text-align:justify"><b><i><span style="font-size:7.5pt;font-family:"Arial",sans-serif;color:#015A9C">This e-mail, including attachments, is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521,
is confidential, and may be legally privileged. If you are not the intended recipient, you are hereby notified that any retention, dissemination, distribution, or copying of this communication is strictly prohibited. Please reply to the sender if you received
this message in error, and then please delete it. Thank you.</span></i></b><span style="color:gray"><br>
<br>
<o:p></o:p></span></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>