Linux · Security advisory · March 24, 2022

RHSA-2022:1049: Security update for 11 packages

RHSA-2022:1049, released March 24, 2022, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2819
98th percentile

Fixed package versions

ProductReleaseFixed in
httpdRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
httpd-develRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
httpd-filesystemRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
httpd-manualRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
httpd-toolsRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
mod_http2RHEL 80:1.15.7-3.module+el8.4.0+8625+d397f3da
mod_ldapRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
mod_mdRHEL 81:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_proxy_htmlRHEL 81:2.4.37-43.module+el8.5.0+14530+6f259f31.3
mod_sessionRHEL 80:2.4.37-43.module+el8.5.0+14530+6f259f31.3
mod_sslRHEL 81:2.4.37-43.module+el8.5.0+14530+6f259f31.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-22720 apache2-data: Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the re... 9.8 0.2819 None reported
Showing 1 to 1 of 1 1