Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apk/alpine/apache2@2.4.60-r0?arch=ppc64le&distroversion=v3.19&reponame=main
purl pkg:apk/alpine/apache2@2.4.60-r0?arch=ppc64le&distroversion=v3.19&reponame=main
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (8)
Vulnerability Summary Aliases
VCID-6tgh-b4td-63f5 Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-39573
VCID-8edq-8rvq-rkf1 CVE-2024-38475
VCID-8nw9-zpxn-ckab Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-38476
VCID-ej7y-7na3-5qby Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute scripts in directories permitted by the configuration but not directly reachable by any URL or source disclosure of scripts meant to only to be executed as CGI. Users are recommended to upgrade to version 2.4.60, which fixes this issue. Some RewriteRules that capture and substitute unsafely will now fail unless rewrite flag "UnsafeAllow3F" is specified. CVE-2024-38474
VCID-ftjw-9fb6-d3cw Encoding problem in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-38473
VCID-nbar-1p1f-bqfk SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.60 which fixes this issue.  Note: Existing configurations that access UNC paths will have to configure new directive "UNCList" to allow access during request processing. CVE-2024-38472
VCID-pjxs-hnjr-duey null pointer dereference in mod_proxy in Apache HTTP Server 2.4.59 and earlier allows an attacker to crash the server via a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue. CVE-2024-38477
VCID-r2pc-wuzb-h7hk Serving WebSocket protocol upgrades over a HTTP/2 connection could result in a Null Pointer dereference, leading to a crash of the server process, degrading performance. CVE-2024-36387

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-08T06:24:15.286923+00:00 Alpine Linux Importer Fixing VCID-r2pc-wuzb-h7hk https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-06T04:54:05.093993+00:00 Alpine Linux Importer Fixing VCID-8edq-8rvq-rkf1 https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-06T04:49:32.717671+00:00 Alpine Linux Importer Fixing VCID-8nw9-zpxn-ckab https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-03T17:52:25.886895+00:00 Alpine Linux Importer Fixing VCID-ej7y-7na3-5qby https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-03T17:44:48.139053+00:00 Alpine Linux Importer Fixing VCID-nbar-1p1f-bqfk https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-03T17:43:40.932832+00:00 Alpine Linux Importer Fixing VCID-6tgh-b4td-63f5 https://secdb.alpinelinux.org/v3.19/main.json 38.1.0
2026-04-01T19:32:00.046856+00:00 Alpine Linux Importer Fixing VCID-pjxs-hnjr-duey https://secdb.alpinelinux.org/v3.19/main.json 38.0.0
2026-04-01T18:50:35.345574+00:00 Alpine Linux Importer Fixing VCID-ftjw-9fb6-d3cw https://secdb.alpinelinux.org/v3.19/main.json 38.0.0