[ GLSA 201903-21 ] Apache

[GLSA]

Gentoo Linux Security Advisory

Title: Apache: Multiple vulnerabilities (GLSA 201903-21)
Severity: normal
Exploitable: remote
Date: 2019-03-28
Bug(s): #676064
ID: 201903-21

Synopsis

Multiple vulnerabilities have been found in Apache Web Server, the
worst of which could result in a Denial of Service condition.


Background

The Apache HTTP server is one of the most popular web servers on the
Internet.


Affected Packages

Package: www-servers/apache
Vulnerable: < 2.4.38-r1
Unaffected: >= 2.4.38-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Apache. Please review
the CVE identifiers referenced below for details.


Impact

A remote attacker can possibly cause a Denial of Service condition or
could bypass mod_session_cookie expiration time.


Workaround

There is no known workaround at this time.

Resolution

All Apache users should upgrade to the latest version: