Skip to content
OpenAdvisories
Unscored RHSA-2016:1420 2 CVEs

Red Hat Security Advisory: httpd24-httpd security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-debuginfo 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-devel 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-manual 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-httpd-tools 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_ldap 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_proxy_html 1:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_session 0:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el6 httpd24-mod_ssl 1:2.4.18-11.el6
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-debuginfo 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-devel 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-manual 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-httpd-tools 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_ldap 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_proxy_html 1:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_session 0:2.4.18-11.el7
Red Hat · RHEL 2 rhel_software_collections:2::el7 httpd24-mod_ssl 1:2.4.18-11.el7

Vulnerabilities 2

  • Unscored —
    CVE-2016-4979 EPSS 19%

    The Apache HTTP Server 2.4.18 through 2.4.20, when mod_http2 and mod_ssl are enabled, does not properly recognize the "…

    apache2 Debian
  • Unscored —
    CVE-2016-5387 EPSS 56%

    The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from …

    apache2 apache2 apache2 Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/httpoxy
  • article
    https://access.redhat.com/solutions/2435501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1352476
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1353755
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1420.json
  • report
    https://access.redhat.com/security/cve/CVE-2016-4979
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-4979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-4979
  • article
    http://httpd.apache.org/security/vulnerabilities_24.html#2.4.23
  • report
    https://access.redhat.com/security/cve/CVE-2016-5387
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-5387
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-5387
  • article
    https://httpoxy.org/
  • article
    https://www.apache.org/security/asf-httpoxy-response.txt