Skip to content
OpenAdvisories
Unscored RHSA-2009:1075 2 CVEs

Red Hat Security Advisory: httpd security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client httpd 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client httpd-debuginfo 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client mod_ssl 1:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-debuginfo 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-devel 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation httpd-manual 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server httpd 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server httpd-debuginfo 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server httpd-devel 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server httpd-manual 0:2.2.3-22.el5_3.1
Red Hat · RHEL 5 enterprise_linux:5::server mod_ssl 1:2.2.3-22.el5_3.1

Vulnerabilities 2

  • Unscored —
    CVE-2008-1678

    Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allow…

    apache2 Debian
  • Unscored —
    CVE-2009-1195

    The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOver…

    apache2 Debian

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=447268
  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=489436
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=497077
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1075.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-1678
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1678
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1678
  • report
    https://access.redhat.com/security/cve/CVE-2009-1195
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1195
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1195