starlingx
/
tools
Code Issues Proposed changes

Debian: apache2 : fix multiple CVEs 

Upgrade apache2 to 2.4.59-1~deb11u1
Upgrade apache2-bin to 2.4.59-1~deb11u1
Upgrade apache2-data to 2.4.59-1~deb11u1
Upgrade apache2-utils to 2.4.59-1~deb11u1

Refer to:
CVE-2023-31122: https://nvd.nist.gov/vuln/detail/CVE-2023-31122
CVE-2023-38709: https://nvd.nist.gov/vuln/detail/CVE-2023-38709
CVE-2023-43622: https://nvd.nist.gov/vuln/detail/CVE-2023-43622
CVE-2023-45802: https://nvd.nist.gov/vuln/detail/CVE-2023-45802
CVE-2024-24795: https://nvd.nist.gov/vuln/detail/CVE-2024-24795
CVE-2024-27316: https://nvd.nist.gov/vuln/detail/CVE-2024-27316
https://security-tracker.debian.org/tracker/DSA-5662-1

Test Plan:
Pass: downloader
Pass: build-pkgs --clean --all
Pass: build-image
Pass: boot

Closes-bug: #2063187

Change-Id: I6a9b350bf11236a2dbea8954d24585bcee9fcb88
Signed-off-by: Wentao Zhang <Wentao.Zhang@windriver.com>
This commit is contained in:
Wentao Zhang 2024-04-22 19:21:07 -07:00 committed by Wentao Zhang
parent 5d7d6b9cb8
commit 7c759a4764
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -4,10 +4,10 @@ acpi-support-base 0.143-5
adduser 3.118
alembic 1.4.3-1
ansible 2.10.7+merged+base+2.10.8+dfsg-1
apache2 2.4.56-1~deb11u1 https://snapshot.debian.org/archive/debian/20230324T031555Z/pool/main/a/apache2/apache2_2.4.56-1~deb11u1_amd64.deb
apache2-bin 2.4.56-1~deb11u1 https://snapshot.debian.org/archive/debian/20230324T031555Z/pool/main/a/apache2/apache2-bin_2.4.56-1~deb11u1_amd64.deb
apache2-data 2.4.56-1~deb11u1 https://snapshot.debian.org/archive/debian/20230324T031555Z/pool/main/a/apache2/apache2-data_2.4.56-1~deb11u1_all.deb
apache2-utils 2.4.56-1~deb11u1 https://snapshot.debian.org/archive/debian/20230324T031555Z/pool/main/a/apache2/apache2-utils_2.4.56-1~deb11u1_amd64.deb
apache2 2.4.59-1~deb11u1 https://snapshot.debian.org/archive/debian-security/20240416T183047Z/pool/updates/main/a/apache2/apache2_2.4.59-1~deb11u1_amd64.deb
apache2-bin 2.4.59-1~deb11u1 https://snapshot.debian.org/archive/debian-security/20240416T183047Z/pool/updates/main/a/apache2/apache2-bin_2.4.59-1~deb11u1_amd64.deb
apache2-data 2.4.59-1~deb11u1 https://snapshot.debian.org/archive/debian-security/20240416T183047Z/pool/updates/main/a/apache2/apache2-data_2.4.59-1~deb11u1_all.deb
apache2-utils 2.4.59-1~deb11u1 https://snapshot.debian.org/archive/debian-security/20240416T183047Z/pool/updates/main/a/apache2/apache2-utils_2.4.59-1~deb11u1_amd64.deb
apparmor 2.13.6-10
apparmor-utils 2.13.6-10
apt 2.2.4