Skip to content
OpenAdvisories
Medium RHSA-2021:0486 1 CVE

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update

Published Sep 13, 2024 · Updated Sep 21, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-brotli 0:1.0.6-40.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-brotli-debuginfo 0:1.0.6-40.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-brotli-devel 0:1.0.6-40.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd-debuginfo 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd-devel 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd-manual 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd-selinux 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-httpd-tools 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native 0:1.3.14-16.Final_redhat_2.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_cluster-native-debuginfo 0:1.3.14-16.Final_redhat_2.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_http2 0:1.15.7-12.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_http2-debuginfo 0:1.15.7-12.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_jk 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_jk-ap24 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_jk-debuginfo 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_jk-manual 0:1.2.48-11.redhat_1.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_ldap 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_md 1:2.0.8-31.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_md-debuginfo 1:2.0.8-31.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_proxy_html 1:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_security 0:2.9.2-58.GA.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_security-debuginfo 0:2.9.2-58.GA.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_session 0:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-mod_ssl 1:2.4.37-66.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-nghttp2 0:1.39.2-35.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-nghttp2-debuginfo 0:1.39.2-35.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-nghttp2-devel 0:1.39.2-35.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl 1:1.1.1g-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-chil 0:1.0.0-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-chil-debuginfo 0:1.0.0-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-debuginfo 1:1.1.1g-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-devel 1:1.1.1g-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-libs 1:1.1.1g-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-perl 1:1.1.1g-3.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-pkcs11 0:0.4.10-18.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-pkcs11-debuginfo 0:0.4.10-18.jbcs.el7
Red Hat · JBoss Core Services 1 jboss_core_services:1::el7 jbcs-httpd24-openssl-static 1:1.1.1g-3.jbcs.el7

Vulnerabilities 1

  • Medium 5.9
    CVE-2020-1971 Public exploit

    EDIPARTYNAME NULL pointer dereference

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equa…

    OpenSSL OpenSSL openssl openssl Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#low
  • article
    https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1903409
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0486.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-1971
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-1971
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-1971
  • article
    https://www.openssl.org/news/secadv/20201208.txt