Summary
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
* httpd: HTTP request splitting with mod_rewrite and mod_proxy (CVE-2023-25690)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | httpd | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | httpd-devel | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | httpd-filesystem | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | httpd-manual | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | httpd-tools | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | mod_http2 | 1.15.7-5.module_el8.7.0+3515+9e4fe0d6.4 |
| AlmaLinux · 8 | mod_ldap | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | mod_md | 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa |
| AlmaLinux · 8 | mod_md | 1:2.0.8-8.module_el8.6.0+3031+fb177b09 |
| AlmaLinux · 8 | mod_proxy_html | 1:2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | mod_session | 2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
| AlmaLinux · 8 | mod_ssl | 1:2.4.37-51.module_el8.7.0+3515+9e4fe0d6.5 |
Vulnerabilities 1
-
Critical 9.8
Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific patter…