ALSA-2023:6403
ALSA-2023:6403 · Moderate: httpd and mod_http2 security, bug fix, and enhancement update
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. The following packages have been upgraded to a later upstream version: httpd (2.4.57). (BZ#2184403) Security Fix(es): * httpd: mod_proxy_uwsgi HTTP response splitting (CVE-2023-27522) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
Fix available
- Published
- Updated
Stack: system
Affected products and versions
httpd AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
httpd-core AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
httpd-devel AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
httpd-filesystem AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
httpd-manual AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
httpd-tools AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
mod_ldap AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
mod_lua AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
mod_proxy_html AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 1:2.4.57-5.el9
Update to 1:2.4.57-5.el9
mod_session AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 2.4.57-5.el9
Update to 2.4.57-5.el9
mod_ssl AlmaLinux:9
- Affected ranges
- ECOSYSTEM: < 1:2.4.57-5.el9
Update to 1:2.4.57-5.el9