apache2 - security update

Fixed packages 2

Vulnerabilities 6

• Unscored —
  CVE-2017-15710 EPSS 18%

  In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCha…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018
• Unscored —
  CVE-2017-15715 Public exploit Scanner template EPSS 86%

  In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could match '$' to a newline character in a m…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018
• Unscored —
  CVE-2018-1283

  In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (Sessio…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018
• Unscored —
  CVE-2018-1301 EPSS 14%

  A specially crafted request could have crashed the Apache HTTP Server prior to version 2.4.30, due to an out of bound a…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018
• Unscored —
  CVE-2018-1303 EPSS 70%

  A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018
• Unscored —
  CVE-2018-1312 EPSS 16%

  In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent rep…

  Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  Mar 26, 2018