Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:4720

Опубликовано: 07 мая 2025
Источник: rocky
Оценка: Important

Описание

Important: httpd:2.4 security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

  • httpd: Encoding problem in mod_proxy (CVE-2024-38473)

  • httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474)

  • httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475)

  • httpd: NULL pointer dereference in mod_proxy (CVE-2024-38477)

  • httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
httpdaarch6465.module+el8.10.0+1938+3b7755d4.3httpd-2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm
httpdaarch6465.module+el8.10.0+1830+22f0c9e0httpd-2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm
httpdaarch6465.module+el8.10.0+1840+b070a976.1httpd-2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm
httpdaarch6465.module+el8.10.0+1842+4a9649e8.2httpd-2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm
httpd-develaarch6465.module+el8.10.0+1938+3b7755d4.3httpd-devel-2.4.37-65.module+el8.10.0+1938+3b7755d4.3.aarch64.rpm
httpd-develaarch6465.module+el8.10.0+1842+4a9649e8.2httpd-devel-2.4.37-65.module+el8.10.0+1842+4a9649e8.2.aarch64.rpm
httpd-develaarch6465.module+el8.10.0+1830+22f0c9e0httpd-devel-2.4.37-65.module+el8.10.0+1830+22f0c9e0.aarch64.rpm
httpd-develaarch6465.module+el8.10.0+1840+b070a976.1httpd-devel-2.4.37-65.module+el8.10.0+1840+b070a976.1.aarch64.rpm
httpd-filesystemnoarch65.module+el8.10.0+1842+4a9649e8.2httpd-filesystem-2.4.37-65.module+el8.10.0+1842+4a9649e8.2.noarch.rpm
httpd-filesystemnoarch65.module+el8.10.0+1830+22f0c9e0httpd-filesystem-2.4.37-65.module+el8.10.0+1830+22f0c9e0.noarch.rpm

Показывать по

Связанные уязвимости

rocky
больше 2 лет назад

Important: httpd security update

oracle-oval
больше 2 лет назад

ELSA-2024-4726: httpd security update (IMPORTANT)

oracle-oval
больше 2 лет назад

ELSA-2024-4720: httpd:2.4 security update (IMPORTANT)

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-9738: package `apache2` update to version 2.4.61-alt1

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-10005: package `apache2` update to version 2.4.61-alt1