Moderate: httpd:2.4/httpd security update

2024-07-0100:00:00

errata.almalinux.org

httpd

apache

security fix

cve-2023-38709

unix

6.8 Medium

AI Score

Confidence

Low

JSON

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchhttpd-manual< 2.4.37-65.module_el8.10.0+3860+a6e26e50httpd-manual-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm
almalinux8noarchhttpd-filesystem< 2.4.37-65.module_el8.10.0+3860+a6e26e50httpd-filesystem-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm
almalinux8x86_64mod_ssl< 2.4.37-65.module_el8.10.0+3860+a6e26e50mod_ssl-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux8x86_64mod_md< 2.0.8-8.module_el8.6.0+2872+fe0ff7aamod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.x86_64.rpm
almalinux8x86_64httpd< 2.4.37-65.module_el8.10.0+3860+a6e26e50httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux8x86_64httpd-devel< 2.4.37-65.module_el8.10.0+3860+a6e26e50httpd-devel-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux8x86_64mod_proxy_html< 2.4.37-65.module_el8.10.0+3860+a6e26e50mod_proxy_html-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux8x86_64mod_http2< 1.15.7-10.module_el8.10.0+3832+564e7653mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.x86_64.rpm
almalinux8x86_64mod_session< 2.4.37-65.module_el8.10.0+3860+a6e26e50mod_session-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux8x86_64mod_ldap< 2.4.37-65.module_el8.10.0+3860+a6e26e50mod_ldap-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	httpd-manual	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	httpd-manual-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm
almalinux	8	noarch	httpd-filesystem	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	httpd-filesystem-2.4.37-65.module_el8.10.0+3860+a6e26e50.noarch.rpm
almalinux	8	x86_64	mod_ssl	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	mod_ssl-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux	8	x86_64	mod_md	< 2.0.8-8.module_el8.6.0+2872+fe0ff7aa	mod_md-2.0.8-8.module_el8.6.0+2872+fe0ff7aa.x86_64.rpm
almalinux	8	x86_64	httpd	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	httpd-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux	8	x86_64	httpd-devel	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	httpd-devel-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux	8	x86_64	mod_proxy_html	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	mod_proxy_html-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux	8	x86_64	mod_http2	< 1.15.7-10.module_el8.10.0+3832+564e7653	mod_http2-1.15.7-10.module_el8.10.0+3832+564e7653.x86_64.rpm
almalinux	8	x86_64	mod_session	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	mod_session-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm
almalinux	8	x86_64	mod_ldap	< 2.4.37-65.module_el8.10.0+3860+a6e26e50	mod_ldap-2.4.37-65.module_el8.10.0+3860+a6e26e50.x86_64.rpm