RLSA-2024:4726

Synopsis

Important: httpd security update

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Improper escaping of output in mod_rewrite (CVE-2024-38475)

* httpd: Substitution encoding issue in mod_rewrite (CVE-2024-38474)

* httpd: null pointer dereference in mod_proxy (CVE-2024-38477)

* httpd: Potential SSRF in mod_rewrite (CVE-2024-39573)

* httpd: Encoding problem in mod_proxy (CVE-2024-38473)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2295012 2295013 2295014 2295016 2295022

CVEs

CVE-2024-38473 CVE-2024-38474 CVE-2024-38475 CVE-2024-38477 CVE-2024-39573

Affected packages

Rocky Linux 9 aarch64 - AppStream

httpd-0:2.4.57-11.el9_4.aarch64.rpm httpd-0:2.4.57-11.el9_4.src.rpm httpd-core-0:2.4.57-11.el9_4.aarch64.rpm httpd-core-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm httpd-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm httpd-debugsource-0:2.4.57-11.el9_4.aarch64.rpm httpd-devel-0:2.4.57-11.el9_4.aarch64.rpm httpd-filesystem-0:2.4.57-11.el9_4.noarch.rpm httpd-manual-0:2.4.57-11.el9_4.noarch.rpm httpd-tools-0:2.4.57-11.el9_4.aarch64.rpm httpd-tools-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm mod_ldap-0:2.4.57-11.el9_4.aarch64.rpm mod_ldap-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm mod_lua-0:2.4.57-11.el9_4.aarch64.rpm mod_lua-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm mod_proxy_html-1:2.4.57-11.el9_4.aarch64.rpm mod_proxy_html-debuginfo-1:2.4.57-11.el9_4.aarch64.rpm mod_session-0:2.4.57-11.el9_4.aarch64.rpm mod_session-debuginfo-0:2.4.57-11.el9_4.aarch64.rpm mod_ssl-1:2.4.57-11.el9_4.aarch64.rpm mod_ssl-debuginfo-1:2.4.57-11.el9_4.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

httpd-0:2.4.57-11.el9_4.ppc64le.rpm httpd-0:2.4.57-11.el9_4.src.rpm httpd-core-0:2.4.57-11.el9_4.ppc64le.rpm httpd-core-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm httpd-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm httpd-debugsource-0:2.4.57-11.el9_4.ppc64le.rpm httpd-devel-0:2.4.57-11.el9_4.ppc64le.rpm httpd-filesystem-0:2.4.57-11.el9_4.noarch.rpm httpd-manual-0:2.4.57-11.el9_4.noarch.rpm httpd-tools-0:2.4.57-11.el9_4.ppc64le.rpm httpd-tools-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm mod_ldap-0:2.4.57-11.el9_4.ppc64le.rpm mod_ldap-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm mod_lua-0:2.4.57-11.el9_4.ppc64le.rpm mod_lua-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm mod_proxy_html-1:2.4.57-11.el9_4.ppc64le.rpm mod_proxy_html-debuginfo-1:2.4.57-11.el9_4.ppc64le.rpm mod_session-0:2.4.57-11.el9_4.ppc64le.rpm mod_session-debuginfo-0:2.4.57-11.el9_4.ppc64le.rpm mod_ssl-1:2.4.57-11.el9_4.ppc64le.rpm mod_ssl-debuginfo-1:2.4.57-11.el9_4.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

httpd-0:2.4.57-11.el9_4.s390x.rpm httpd-0:2.4.57-11.el9_4.src.rpm httpd-core-0:2.4.57-11.el9_4.s390x.rpm httpd-core-debuginfo-0:2.4.57-11.el9_4.s390x.rpm httpd-debuginfo-0:2.4.57-11.el9_4.s390x.rpm httpd-debugsource-0:2.4.57-11.el9_4.s390x.rpm httpd-devel-0:2.4.57-11.el9_4.s390x.rpm httpd-filesystem-0:2.4.57-11.el9_4.noarch.rpm httpd-manual-0:2.4.57-11.el9_4.noarch.rpm httpd-tools-0:2.4.57-11.el9_4.s390x.rpm httpd-tools-debuginfo-0:2.4.57-11.el9_4.s390x.rpm mod_ldap-0:2.4.57-11.el9_4.s390x.rpm mod_ldap-debuginfo-0:2.4.57-11.el9_4.s390x.rpm mod_lua-0:2.4.57-11.el9_4.s390x.rpm mod_lua-debuginfo-0:2.4.57-11.el9_4.s390x.rpm mod_proxy_html-1:2.4.57-11.el9_4.s390x.rpm mod_proxy_html-debuginfo-1:2.4.57-11.el9_4.s390x.rpm mod_session-0:2.4.57-11.el9_4.s390x.rpm mod_session-debuginfo-0:2.4.57-11.el9_4.s390x.rpm mod_ssl-1:2.4.57-11.el9_4.s390x.rpm mod_ssl-debuginfo-1:2.4.57-11.el9_4.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

httpd-0:2.4.57-11.el9_4.src.rpm httpd-0:2.4.57-11.el9_4.x86_64.rpm httpd-core-0:2.4.57-11.el9_4.x86_64.rpm httpd-core-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm httpd-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm httpd-debugsource-0:2.4.57-11.el9_4.x86_64.rpm httpd-devel-0:2.4.57-11.el9_4.x86_64.rpm httpd-filesystem-0:2.4.57-11.el9_4.noarch.rpm httpd-manual-0:2.4.57-11.el9_4.noarch.rpm httpd-tools-0:2.4.57-11.el9_4.x86_64.rpm httpd-tools-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm mod_ldap-0:2.4.57-11.el9_4.x86_64.rpm mod_ldap-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm mod_lua-0:2.4.57-11.el9_4.x86_64.rpm mod_lua-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm mod_proxy_html-1:2.4.57-11.el9_4.x86_64.rpm mod_proxy_html-debuginfo-1:2.4.57-11.el9_4.x86_64.rpm mod_session-0:2.4.57-11.el9_4.x86_64.rpm mod_session-debuginfo-0:2.4.57-11.el9_4.x86_64.rpm mod_ssl-1:2.4.57-11.el9_4.x86_64.rpm mod_ssl-debuginfo-1:2.4.57-11.el9_4.x86_64.rpm