Linux · Security advisory · April 11, 2024

RHSA-2024:1786: Security update for 11 packages

RHSA-2024:1786, released April 11, 2024, fixes 1 CVE across 11 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.8876
99th percentile

Fixed package versions

ProductReleaseFixed in
httpdRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
httpd-develRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
httpd-filesystemRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
httpd-manualRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
httpd-toolsRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
mod_http2RHEL 80:1.15.7-8.module+el8.9.0+21652+2dd1200b.5
mod_ldapRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
mod_mdRHEL 81:2.0.8-8.module+el8.9.0+19080+567b90f8
mod_proxy_htmlRHEL 81:2.4.37-62.module+el8.9.0+19699+7a7a2044
mod_sessionRHEL 80:2.4.37-62.module+el8.9.0+19699+7a7a2044
mod_sslRHEL 81:2.4.37-62.module+el8.9.0+19699+7a7a2044

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-27316 apache2: This update for apache2 fixes the following issues: - CVE-2023-38709: Fixed HTTP response splitting (bsc#1222330). -... 7.5 0.8876 None reported
Showing 1 to 1 of 1 1