https://twitter.com/iamamoose/status/1112966189276389376 "Flaw in Apache HTTP Server 2.4.17 - 2.4.38 allows anyone you allow to write a script (PHP, CGI,..) to gain root. Get 2.4.39 *now* especially if you have untrusted script authors or run shared hosting (or use mod_auth_digest, due to a separate flaw)"
Решето.
#226419 POSTPONED #1 c8.1 apache2.git=2.4.39-alt1 #226418 POSTPONED #1 p8 apache2.git=2.4.39-alt1 #226417 BUILDING #1 [locked] sisyphus apache2.git=2.4.39-alt1
http://git.altlinux.org/tasks/archive/done/_221/226417/logs/events.1.3.log