Red Hat Security AdvisoryRHSA-2020:2263
httpd24-httpd and httpd24-mod_md security and enhancement update
Released 2020-05-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) httpd24-httpd-2.4.34-18.el6, httpd24-httpd-devel-2.4.34-18.el6, httpd24-httpd-manual-2.4.34-18.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) httpd24-httpd-2.4.34-18.el7, httpd24-httpd-devel-2.4.34-18.el7, httpd24-httpd-manual-2.4.34-18.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) httpd24-httpd-2.4.34-18.el7, httpd24-httpd-devel-2.4.34-18.el7, httpd24-httpd-manual-2.4.34-18.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) httpd24-httpd-2.4.34-18.el7, httpd24-httpd-devel-2.4.34-18.el7, httpd24-httpd-manual-2.4.34-18.el7 +6
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) httpd24-httpd-2.4.34-18.el6, httpd24-httpd-devel-2.4.34-18.el6, httpd24-httpd-manual-2.4.34-18.el6 +5
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) httpd24-httpd-2.4.34-18.el7, httpd24-httpd-devel-2.4.34-18.el7, httpd24-httpd-manual-2.4.34-18.el7 +6
Fixes 2 records
Priority HIGH 66
In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an unexpected URL within the request URL.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.73981 · Published 2019-09-25 · Partial fix CWE-601
Priority MEDIUM 61
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request U…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.56691 · Published 2020-04-01 · Fixed CWE-601
