Linux · AlmaLinux · Security advisory · April 11, 2024

ALSA-2024:1786: Security update for 11 packages

ALSA-2024:1786, released April 11, 2024, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.5
Base score, 0 to 10
Highest EPSS
0.8876
99th percentile

Fixed package versions

ProductReleaseFixed in
httpdalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
httpd-develalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
httpd-filesystemalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
httpd-manualalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
httpd-toolsalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
mod_http2almalinux 81.15.7-8.module_el8.9.0+3809+48080a14.5.alma.1
mod_ldapalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
mod_mdalmalinux 81:2.0.8-8.module_el8.6.0+2872+fe0ff7aa
mod_proxy_htmlalmalinux 81:2.4.37-62.module_el8.9.0+3646+acd210d0
mod_sessionalmalinux 82.4.37-62.module_el8.9.0+3646+acd210d0
mod_sslalmalinux 81:2.4.37-62.module_el8.9.0+3646+acd210d0

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2024-27316 apache2: This update for apache2 fixes the following issues: - CVE-2023-38709: Fixed HTTP response splitting (bsc#1222330). -...7.5 0.8876 None reported
Showing 1 to 1 of 1 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.