Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Ubuntu 14.04 ESM USN-5487-2 Apache Server Regression Fix

ubuntu
Calendar Grey June 23, 2022
Dist Ubuntu Esm H88
Stay secure by promptly handling the Apache HTTP Server vulnerability on Ubuntu 14.04 ESM with our update guidelines and essential security tips.
USN-5487-1 introduced a regression in Apache.

Summary

USN-5487-1 introduced a regression in Apache.

Software Description:

- apache2: Apache HTTP server

Details:

USN-5487-1 fixed a vulnerabilities in Apache. Unfortunately, that update introduced

a regression when proxying balancer manager connections in some configurations

on Ubuntu 14.04 ESM. This update reverts those changes till further fix.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Apache HTTP Server mod_proxy_ajp incorrectly handled

certain crafted request. A remote attacker could possibly use this issue to

perform an HTTP Request Smuggling attack. (CVE-2022-26377)

It was discovered that Apache HTTP Server incorrectly handled certain

request. An attacker could possibly use this issue to cause a denial

of service. (CVE-2022-28614)

It was discovered that Apache HTTP Server incorrectly handled certain request.

An attacker could possibly use this issue to cause a crash or expose

sensitive informat...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service apache2 regression Ubuntu 14.04 ESM

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 ESM:
  apache2                         2.4.7-1ubuntu4.22+esm6
  apache2-bin                     2.4.7-1ubuntu4.22+esm6

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5487-2

https://ubuntu.com/security/notices/USN-5487-1

Severity
critical
Lowest
Low
Medium
High
Critical

June 23, 2022

Topics%20covered

Topics Covered

security advisory denial of service apache2 regression Ubuntu 14.04 ESM

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.