Apache2 - 2.4.62

Jerry Geis jerry.geis at gmail.com
Mon Apr 28 20:30:16 UTC 2025


On Mon, Apr 28, 2025 at 4:14 PM Colin Law <clanlaw at gmail.com> wrote:

> On Mon, 28 Apr 2025 at 19:04, Jerry Geis <jerry.geis at gmail.com> wrote:
>
>>
>> Curious - Why the updated apache would not be in the normal "update"
>> process. Especially since there is a CVE for it.
>> Why would I have to load a different repo ?
>>
>
>
> Which CVE is that?  If it is serious then I would expect it to be patched
> in the official Ubuntu release.
>
> Colin L.
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users


one of them was CVE-2024-36387
The website (https://ubuntu.com/security/CVE-2024-36387)  says fixed - but
the scan was flagging it as an issue.

When I did "apache2 --version" this did not show 2.4.58-1ubuntu8.2 (which
is there version saying it was fixed in)
only 2.4.58

Jerry
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20250428/4c94cf0e/attachment.html>


More information about the ubuntu-users mailing list