Apache: Multiple vulnerabilities

Apache: Multiple vulnerabilities Multiple vulnerabilities have been found in Apache, the worst of which could allow HTTP request smuggling attacks or a Denial of Service condition. 2016-10-06 2016-10-13: 2 524680 536684 554948 557198 583276 588138 remote 2.2.31 2.4.23 2.4.23

Apache HTTP Server is one of the most popular web servers on the Internet.

Multiple vulnerabilities have been discovered in Apache HTTP Server. Please review the CVE identifiers referenced below for details.

Remote attackers could bypass intended access restrictions, conduct HTTP request smuggling attacks, or cause a Denial of Service condition.

There is no known workaround at this time.

All Apache users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=www-servers/apache-2.4.23"

CVE-2014-3581 CVE-2015-3183 CVE-2016-1546 CVE-2016-4979 BlueKnight b-man