Multiple vulnerabilities has been found and corrected in apache : Insecure handling of LD_LIBRARY_PATH was found that could lead to the current working directory to be searched for DSOs. This could allow a local user to execute code as root if an administrator runs apachectl from an untrusted directory . Possible XSS for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled . The updated packages have been upgraded to the latest 2.2.23 version which is not vulnerable to these issues.