www-servers

Security Bug Reports

• <www-servers/caddy-2.5.2: oob read allows for DoS

  860147 - Assigned to Gentoo Security
• <www-servers/varnish-7.1.2: multiple vulnerabilities

  880627 - Assigned to Gentoo Security
• <www-servers/h2o-2.2.6-r2: HTTP/2 Rapid Reset vulnerabilitiy

  915567 - Assigned to Gentoo Security
• <www-servers/tomcat-{8.5.94,9.0.81,10.1.14}: Multiple vulnerabilities

  915568 - Assigned to Gentoo Security
• <www-servers/apache-2.4.58: multiple vulnerabilities

  915996 - Assigned to Gentoo Security
• <www-servers/tomcat-{8.5.93:8.5,9.0.79:9,10.1.13:10}: open redirect

  917466 - Assigned to Gentoo Security
• <www-servers/caddy-2.7.5: http/2 rapid reset vulnerability

  918413 - Assigned to Gentoo Security
• <www-servers/varnish-7.5.0: http/2 rapid reset vulnerability

  918416 - Assigned to Gentoo Security
• <www-servers/tomcat-{10.1.16,9.0.83,8.5.96}: http request smuggling

  918700 - Assigned to Gentoo Security
• <www-servers/h2o-2.3.0_pre20241014: multiple vulnerabilities

  919882 - Assigned to Gentoo Security
• <www-servers/puma-6.4.3: Header normalization allows for client to clobber proxy set headers

  939950 - Assigned to Gentoo Security