httpd:2.4/httpd security update

2024-07-0214:10:24

Rockylinux Product Errata

errata.rockylinux.org

httpd

security update

rocky linux 8

module.mod_md

module.mod_http2

mod_http2

mod_md

cve

http server

response splitting

cvss

vulnerability

unix

6.8 Medium

AI Score

Confidence

Low

JSON

An update is available for module.mod_md, module.mod_http2, mod_http2, mod_md.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
rocky8aarch64mod_http2< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky8x86_64mod_http2< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky8aarch64mod_http2-debuginfo< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky8x86_64mod_http2-debuginfo< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky8aarch64mod_http2-debugsource< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky8x86_64mod_http2-debugsource< 1.15.7-10.module+el8.10.0+1775+6b057638mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky8aarch64mod_md< 2.0.8-8.module+el8.9.0+1370+89cc8ad5mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm
rocky8x86_64mod_md< 2.0.8-8.module+el8.9.0+1370+89cc8ad5mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm
rocky8aarch64mod_md-debuginfo< 2.0.8-8.module+el8.9.0+1370+89cc8ad5mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm
rocky8x86_64mod_md-debuginfo< 2.0.8-8.module+el8.9.0+1370+89cc8ad5mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
rocky	8	aarch64	mod_http2	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky	8	x86_64	mod_http2	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky	8	aarch64	mod_http2-debuginfo	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky	8	x86_64	mod_http2-debuginfo	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-debuginfo-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky	8	aarch64	mod_http2-debugsource	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.aarch64.rpm
rocky	8	x86_64	mod_http2-debugsource	< 1.15.7-10.module+el8.10.0+1775+6b057638	mod_http2-debugsource-0:1.15.7-10.module+el8.10.0+1775+6b057638.x86_64.rpm
rocky	8	aarch64	mod_md	< 2.0.8-8.module+el8.9.0+1370+89cc8ad5	mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm
rocky	8	x86_64	mod_md	< 2.0.8-8.module+el8.9.0+1370+89cc8ad5	mod_md-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm
rocky	8	aarch64	mod_md-debuginfo	< 2.0.8-8.module+el8.9.0+1370+89cc8ad5	mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.aarch64.rpm
rocky	8	x86_64	mod_md-debuginfo	< 2.0.8-8.module+el8.9.0+1370+89cc8ad5	mod_md-debuginfo-1:2.0.8-8.module+el8.9.0+1370+89cc8ad5.x86_64.rpm