New Apache web server release - SANS Internet Storm Center

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Johannes Ullrich

Threat Level: green

New Apache web server release
The Apache folks have released version 2.4.9 of their ubiquitous web server. This one fixes a couple of security vulnerabilities along with some other bug fixes, one in mod_log_config having to do with issues with truncated cookies and one in mod_dav that was a potential denial of service. Expect most of the Linux distros to apply the appropriate fixes shortly, but if you are building from source or running on a platform that won't push the updates to you, go grab the update. References: http://httpd.apache.org/security/vulnerabilities_24.html http://www.apache.org/dist/httpd/CHANGES_2.4.9 --------------- Jim Clausing, GIAC GSE #26 jclausing --at-- isc [dot] sans (dot) edu I will be teaching next: Reverse-Engineering Malware: Malware Analysis Tools and Techniques - SANS Tokyo Autumn 2022	Jim 423 Posts ISC Handler Mar 17th 2014
Thread locked Subscribe	Mar 17th 2014 8 years ago
Expect Apple to incorporate it into OS X sometime in early 2016	Anonymous
Quote	Mar 17th 2014 8 years ago