Red Hat Security AdvisoryRHSA-2016:1421
httpd security update
Released 2016-07-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-92.el5_11, httpd-2.2.3-92.el5_11.i386, httpd-2.2.3-92.el5_11.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-92.el5_11, httpd-2.2.3-92.el5_11.i386, mod_ssl-1:2.2.3-92.el5_11 +1
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-54.el6_8, httpd-tools-2.2.15-54.el6_8
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-devel-2.2.15-54.el6_8, httpd-manual-2.2.15-54.el6_8, mod_ssl-1:2.2.15-54.el6_8
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-92.el5_11, httpd-devel-2.2.3-92.el5_11, httpd-devel-2.2.3-92.el5_11.i386 +2
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-54.el6_8, httpd-tools-2.2.15-54.el6_8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-devel-2.2.15-54.el6_8, httpd-manual-2.2.15-54.el6_8, mod_ssl-1:2.2.15-54.el6_8
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-54.el6_8, httpd-devel-2.2.15-54.el6_8, httpd-devel-2.2.15-54.el6_8.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-54.el6_8, httpd-devel-2.2.15-54.el6_8, httpd-manual-2.2.15-54.el6_8 +2
Fixes 1 record
Priority HIGH 68
The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remot…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.55724 · Published 2016-07-19 · Partial fix
