RHSA-2022:1136: Important: httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.<br>Security Fix(es):<br><li> httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)</li> <li> httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling (CVE-2022-22720)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:1136?
The severity of RHSA-2022:1136 is categorized as critical due to the vulnerability in mod_lua that could lead to a buffer overflow.
How do I fix RHSA-2022:1136?
To fix RHSA-2022:1136, you need to update the httpd package to version 2.4.6-89.el7_6.4 or later.
What vulnerabilities are addressed in RHSA-2022:1136?
RHSA-2022:1136 addresses a possible buffer overflow in mod_lua and errors during the handling of multipart content.
Which versions of the httpd package are affected by RHSA-2022:1136?
The affected versions of the httpd package are any prior to 2.4.6-89.el7_6.4.
Is RHSA-2022:1136 applicable to all architectures?
Yes, RHSA-2022:1136 applies to multiple architectures including x86_64 and ppc64le.