Red Hat Bug Fix Advisory: httpd24 bug fix and enhancement update

Fixed packages 9

Vulnerabilities 2

• Unscored —
  CVE-2020-11984 Public exploit Scanner template EPSS 90%

  Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

  apache2 apache2 apache2 uwsgi Debian Ubuntu Alpine
  Aug 7, 2020
• Unscored —
  CVE-2020-11993 EPSS 57%

  Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic …

  apache2 apache2 apache2 Debian Ubuntu Alpine
  Aug 7, 2020

References

• article
  https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html/3.6_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1600579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1607737
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1637891
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1823836
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1828812
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_5280.json
• report
  https://access.redhat.com/security/cve/CVE-2020-11984
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1866563
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-11984
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-11984
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-11984
• report
  https://access.redhat.com/security/cve/CVE-2020-11993
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1866564
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-11993
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-11993
• article
  https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2020-11993