Linux · Security advisory · May 10, 2022

RHSA-2022:1915: Security update for 11 packages

RHSA-2022:1915, released May 10, 2022, fixes 4 CVEs across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8230
99th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
httpdRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
httpd-develRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
httpd-filesystemRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
httpd-manualRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
httpd-toolsRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
mod_http2RHEL 80:1.15.7-5.module+el8.6.0+13996+01710940
mod_ldapRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
mod_mdRHEL 81:2.0.8-8.module+el8.3.0+6814+67d1e611
mod_proxy_htmlRHEL 81:2.4.37-47.module+el8.6.0+14529+083145da.1
mod_sessionRHEL 80:2.4.37-47.module+el8.6.0+14529+083145da.1
mod_sslRHEL 81:2.4.37-47.module+el8.6.0+14529+083145da.1

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-44224 httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 8.2 0.8230 None reported
High CVE-2021-36160 httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 7.5 0.6372 None reported
High CVE-2020-35452 httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 7.5 0.5319 None reported
High CVE-2021-33193 httpd: The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fix(es... 7.5 0.4618 None reported
Showing 1 to 4 of 4 1