Linux · AlmaLinux · Security advisory · September 11, 2023

ALSA-2023:5050: Security update for 11 packages

ALSA-2023:5050, released September 11, 2023, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.0213
82nd percentile

Fixed package versions

ProductReleaseFixed in
httpdalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
httpd-develalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
httpd-filesystemalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
httpd-manualalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
httpd-toolsalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
mod_http2almalinux 81.15.7-8.module_el8.8.0+3554+ec1058a7.3
mod_ldapalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
mod_mdalmalinux 81:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
mod_proxy_htmlalmalinux 81:2.4.37-56.module_el8.8.0+3605+a3cf1030.7
mod_sessionalmalinux 82.4.37-56.module_el8.8.0+3605+a3cf1030.7
mod_sslalmalinux 81:2.4.37-56.module_el8.8.0+3605+a3cf1030.7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2023-27522 apache2: HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi7.5 0.0213 None reported
Showing 1 to 1 of 1 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.