Linux · Security advisory · September 10, 2020

RHSA-2020:3714: Security update for 11 packages

RHSA-2020:3714, released September 10, 2020, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8884
99th percentile

Fixed package versions

ProductReleaseFixed in
httpdRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
httpd-develRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
httpd-filesystemRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
httpd-manualRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
httpd-toolsRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
mod_http2RHEL 80:1.11.3-3.module+el8.2.0+7758+84b4ca3e.1
mod_ldapRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
mod_mdRHEL 81:2.0.8-7.module+el8.2.0+5531+7e4d69a2
mod_proxy_htmlRHEL 81:2.4.37-21.module+el8.2.0+5008+cca404a3
mod_sessionRHEL 80:2.4.37-21.module+el8.2.0+5008+cca404a3
mod_sslRHEL 81:2.4.37-21.module+el8.2.0+5008+cca404a3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-9490 mod_md: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 7.5 0.8884 None reported
Showing 1 to 1 of 1 1