Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP8 security update

Fixed packages 118

Vulnerabilities 7

• High 7.5
  CVE-2020-8285

  curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildca…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Medium 5.3
  CVE-2021-22876

  curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Act…

  curl curl curl Debian Ubuntu Alpine
  Apr 1, 2021
• Medium 4.3
  CVE-2021-22890

  curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due…

  curl curl curl Debian Ubuntu Alpine
  Apr 1, 2021
• Low 3.7
  CVE-2020-8284

  A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP ad…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2020-8169

  curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2020-8286

  curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verificati…

  curl curl curl Debian Ubuntu Alpine
  Dec 14, 2020
• Unscored —
  CVE-2021-22901 EPSS 64%

  curl 7.75.0 through 7.76.1 suffers from a use-after-free vulnerability resulting in already freed memory being used whe…

  curl curl Azure Linux Alpine
  Jun 11, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1847916
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902667
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1902687
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1906096
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1941964
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1941965
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1963146
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1968013
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2472.json
• report
  https://access.redhat.com/security/cve/CVE-2020-8169
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8169
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8169
• article
  https://curl.haxx.se/docs/CVE-2020-8169.html
• report
  https://access.redhat.com/security/cve/CVE-2020-8284
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8284
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8284
• article
  https://curl.se/docs/CVE-2020-8284.html
• report
  https://access.redhat.com/security/cve/CVE-2020-8285
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8285
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8285
• article
  https://curl.se/docs/CVE-2020-8285.html
• article
  https://github.com/curl/curl/issues/6255
• report
  https://access.redhat.com/security/cve/CVE-2020-8286
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-8286
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-8286
• article
  https://curl.se/docs/CVE-2020-8286.html
• report
  https://access.redhat.com/security/cve/CVE-2021-22876
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22876
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22876
• report
  https://access.redhat.com/security/cve/CVE-2021-22890
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22890
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22890
• article
  https://curl.se/docs/CVE-2021-22890.html
• report
  https://access.redhat.com/security/cve/CVE-2021-22901
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-22901
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-22901
• article
  https://curl.se/docs/CVE-2021-22901.html