Cette page suit l'état du correctif pour Alpine Linux. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-29170 →
ALPINE-CVE-2026-29170
A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FT...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A cross-site scripting vulnerability exists in mod_proxy_ftp's HTML directory list generation in Apache HTTP Server 2.4.67 and earlier when listing FTP directory contents either via forward or reverse proxy configuration.
Users are recommended to upgrade to version 2.4.68, which fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Alpine:v3.21
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]
Alpine:v3.22
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]
Alpine:v3.23
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]
Alpine:v3.24
apache2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.68-r0"}]}]
Références
- advisory security.alpinelinux.org