Red Hat Security AdvisoryRHSA-2019:0746
httpd24-httpd and httpd24-mod_auth_mellon security update
Released 2019-04-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-httpd-2.4.34-7.el6.1, httpd24-httpd-devel-2.4.34-7.el6.1, httpd24-httpd-manual-2.4.34-7.el6.1 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) httpd24-httpd-2.4.34-7.el7.1, httpd24-httpd-devel-2.4.34-7.el7.1, httpd24-httpd-manual-2.4.34-7.el7.1 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) httpd24-httpd-2.4.34-7.el7.1, httpd24-httpd-devel-2.4.34-7.el7.1, httpd24-httpd-manual-2.4.34-7.el7.1 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) httpd24-httpd-2.4.34-7.el7.1, httpd24-httpd-devel-2.4.34-7.el7.1, httpd24-httpd-manual-2.4.34-7.el7.1 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) httpd24-httpd-2.4.34-7.el7.1, httpd24-httpd-devel-2.4.34-7.el7.1, httpd24-httpd-manual-2.4.34-7.el7.1 +7
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-httpd-2.4.34-7.el6.1, httpd24-httpd-devel-2.4.34-7.el6.1, httpd24-httpd-manual-2.4.34-7.el6.1 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) httpd24-httpd-2.4.34-7.el7.1, httpd24-httpd-devel-2.4.34-7.el7.1, httpd24-httpd-manual-2.4.34-7.el7.1 +7
Fixes 2 records
Priority CRITICAL 93KEV
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) cou…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.65005 · Published 2019-04-08 · Partial fix CWE-416
Priority MEDIUM 41
A vulnerability was found in mod_auth_mellon before v0.14.2.
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.02969 · Published 2019-03-26 · Fixed in v0.14.2 CWE-305
