Red Hat Security Advisory

RHSA-2021:4537

httpd:2.4 security update

Released 2021-11-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) httpd-2.4.37-43.module+el8.5.0+13064+c4b14997.aarch64::httpd:2.4, httpd-2.4.37-43.module+el8.5.0+13064+c4b14997.ppc64le::httpd:2.4, httpd-2.4.37-43.module+el8.5.0+13064+c4b14997.s390x::httpd:2.4 +38

Fixes 1 record

TI-2021-03613 CVE-2021-20325 · GHSA-4pm7-9gg5-72pv

Memory corruption in httpd

MEDIUM 45

Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01593 Published 2022-02-18 Fixed CWE-119