Lucene search

AlmaLinuxALSA-2022:1049

HistoryMar 24, 2022 - 10:44 a.m.

Important: httpd:2.4 security update

2022-03-2410:44:04

errata.almalinux.org

0.011 Low

EPSS

Percentile

84.2%

JSON

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling (CVE-2022-22720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8aarch64mod_md< 2.0.8-8.module_el8.6.0+2872+fe0ff7aamod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.aarch64.rpm
almalinux8x86_64mod_session< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almamod_session-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux8x86_64mod_ldap< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almamod_ldap-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux8x86_64mod_md< 2.0.8-8.module_el8.6.0+2872+fe0ff7aamod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.x86_64.rpm
almalinux8x86_64httpd< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almahttpd-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux8x86_64mod_ssl< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almamod_ssl-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux8noarchhttpd-manual< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almahttpd-manual-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.noarch.rpm
almalinux8x86_64httpd-tools< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almahttpd-tools-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux8noarchhttpd-filesystem< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almahttpd-filesystem-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.noarch.rpm
almalinux8x86_64mod_proxy_html< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.almamod_proxy_html-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	aarch64	mod_md	< 2.0.8-8.module_el8.6.0+2872+fe0ff7aa	mod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.aarch64.rpm
almalinux	8	x86_64	mod_session	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	mod_session-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux	8	x86_64	mod_ldap	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	mod_ldap-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux	8	x86_64	mod_md	< 2.0.8-8.module_el8.6.0+2872+fe0ff7aa	mod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.x86_64.rpm
almalinux	8	x86_64	httpd	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	httpd-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux	8	x86_64	mod_ssl	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	mod_ssl-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux	8	noarch	httpd-manual	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	httpd-manual-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.noarch.rpm
almalinux	8	x86_64	httpd-tools	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	httpd-tools-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm
almalinux	8	noarch	httpd-filesystem	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	httpd-filesystem-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.noarch.rpm
almalinux	8	x86_64	mod_proxy_html	< 2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma	mod_proxy_html-2.4.37-43.module_el8.5.0+2631+6f259f31.3.alma.x86_64.rpm

Rows per page:

1-10 of 111

References

errata.almalinux.org/8/ALSA-2022-1049.html

vulners.com/cve/CVE-2022-22720