Red Hat Security AdvisoryRHSA-2019:2343
httpd security and bug fix update
Released 2019-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) httpd-2.4.6-90.el7, httpd-devel-2.4.6-90.el7, httpd-manual-2.4.6-90.el7 +5
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) httpd-2.4.6-90.el7, httpd-devel-2.4.6-90.el7, httpd-manual-2.4.6-90.el7 +5
- Red Hat Enterprise Linux Server (v. 7) httpd-2.4.6-90.el7, httpd-devel-2.4.6-90.el7, httpd-manual-2.4.6-90.el7 +3
- Red Hat Enterprise Linux Server Optional (v. 7) mod_ldap-2.4.6-90.el7, mod_proxy_html-1:2.4.6-90.el7
- Red Hat Enterprise Linux Workstation (v. 7) httpd-2.4.6-90.el7, httpd-devel-2.4.6-90.el7, httpd-manual-2.4.6-90.el7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) mod_ldap-2.4.6-90.el7, mod_proxy_html-1:2.4.6-90.el7
Fixes 2 records
Priority MEDIUM 49
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid credentials to authenticate using another username, bypassing config…
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.16355 · Published 2019-04-08 · Partial fix CWE-362
Priority MEDIUM 41
A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.1786 · Published 2019-06-11 · Partial fix CWE-706
