{"id":"CLSA-2025-1760711358","summary":"Fix CVE(s): CVE-2024-38474, CVE-2024-38475","details":"   * SECURITY UPDATE: mod_rewrite proxy handler substitution and prefix_stat\n     vulnerabilities\n     - debian/patches/CVE-2024-38474-38475-*.patch: tighten up prefix_stat and %3f\n       handling, add better question mark tracking to avoid UnsafeAllow3F\n     - CVE-2024-38474, CVE-2024-38475","modified":"2026-06-04T09:45:07.361622624Z","published":"2025-10-20T14:02:40Z","upstream":["CVE-2024-38474","CVE-2024-38475"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1760711358.html"}],"affected":[{"package":{"name":"apache2","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-bin","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-bin?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-data","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-data?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-doc","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-doc?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-ssl-dev","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-ssl-dev?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-suexec-custom","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-custom?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-suexec-pristine","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-suexec-pristine?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"apache2-utils","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/apache2-utils?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"libapache2-mod-md","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-md?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}},{"package":{"name":"libapache2-mod-proxy-uwsgi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/libapache2-mod-proxy-uwsgi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.59-1~deb10u1+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2025-1760711358.json"}}],"schema_version":"1.7.5"}