Linux · Security advisory · November 18, 2021

ELSA-2021-4537: Security update for 11 packages

ELSA-2021-4537, released November 18, 2021, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0159
75th percentile

Fixed package versions

ProductReleaseFixed in
httpdol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
httpd-develol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
httpd-filesystemol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
httpd-manualol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
httpd-toolsol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
mod_http2ol 80:1.15.7-3.module+el8.4.0+20024+b87b2deb
mod_ldapol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
mod_mdol 81:2.0.8-8.module+el8.3.0+7816+49791cfd
mod_proxy_htmlol 81:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
mod_sessionol 80:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9
mod_sslol 81:2.4.37-43.0.1.module+el8.5.0+20426+404a9eb9

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-20325 httpd-tools: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 9.8 0.0159 None reported
Showing 1 to 1 of 1 1