Red Hat Security AdvisoryRHSA-2017:1721
httpd security and bug fix update
Released 2017-07-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) httpd-2.2.15-60.el6_9.4, httpd-tools-2.2.15-60.el6_9.4
- Red Hat Enterprise Linux Desktop Optional (v. 6) httpd-devel-2.2.15-60.el6_9.4, httpd-manual-2.2.15-60.el6_9.4, mod_ssl-1:2.2.15-60.el6_9.4
- Red Hat Enterprise Linux HPC Node (v. 6) httpd-2.2.15-60.el6_9.4, httpd-tools-2.2.15-60.el6_9.4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) httpd-devel-2.2.15-60.el6_9.4, httpd-manual-2.2.15-60.el6_9.4, mod_ssl-1:2.2.15-60.el6_9.4
- Red Hat Enterprise Linux Server (v. 6) httpd-2.2.15-60.el6_9.4, httpd-devel-2.2.15-60.el6_9.4, httpd-devel-2.2.15-60.el6_9.4.ppc +3
- Red Hat Enterprise Linux Workstation (v. 6) httpd-2.2.15-60.el6_9.4, httpd-devel-2.2.15-60.el6_9.4, httpd-manual-2.2.15-60.el6_9.4 +2
Fixes 1 record
Priority MEDIUM 47
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.13252 · Published 2017-07-27 · Partial fix
