RHSA-2021:0486: Low: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.<br>This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.<br>Security fix(es):<br><li> openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:0486?
The severity of RHSA-2021:0486 is classified as moderate.
How do I fix RHSA-2021:0486?
To fix RHSA-2021:0486, upgrade to the latest version of the affected packages as specified in the advisory.
Which packages are affected by RHSA-2021:0486?
Affected packages for RHSA-2021:0486 include jbcs-httpd24-brotli, jbcs-httpd24-httpd, jbcs-httpd24-nghttp2, jbcs-httpd24-openssl, and others listed in the advisory.
What enhancements are included in RHSA-2021:0486?
RHSA-2021:0486 includes bug fixes and enhancements from the previous service pack.
Is RHSA-2021:0486 applicable to all systems?
RHSA-2021:0486 is applicable specifically to systems running Red Hat JBoss Core Services.