cve 2024 39884

CVE-2024-39884 is a regression in Apache HTTP Server 2.4.60 that can cause local source files to be served raw when legacy content-type handlers like AddType-based PHP mappings are used. The vulnerability is fixed upstream, and Microsoft's Security Response Center has confirmed that Azure Linux images include the affected component, making them potentially in scope. However, this confirmation is not a guarantee that other Microsoft products are unaffected. Operators should treat MSRC's wording as a product-level attestation and perform artifact-level verification across their environments. This tag covers discussions about the vulnerability's impact on Azure Linux and cross-product risk assessment.