Summary
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
* httpd:2.4: httpd: HTTP response splitting (CVE-2023-38709)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | httpd | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | httpd-devel | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | httpd-filesystem | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | httpd-manual | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | httpd-tools | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | mod_http2 | 1.15.7-10.module_el8.10.0+3832+564e7653 |
| AlmaLinux · 8 | mod_ldap | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | mod_md | 1:2.0.8-8.module_el8.6.0+2872+fe0ff7aa |
| AlmaLinux · 8 | mod_md | 1:2.0.8-8.module_el8.6.0+3031+fb177b09 |
| AlmaLinux · 8 | mod_proxy_html | 1:2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | mod_session | 2.4.37-65.module_el8.10.0+3860+a6e26e50 |
| AlmaLinux · 8 | mod_ssl | 1:2.4.37-65.module_el8.10.0+3860+a6e26e50 |
Vulnerabilities 1
-
High 7.3CVE-2023-38709 Public exploit
Apache HTTP Server: HTTP response splitting
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.