RHSA-2022:1137: Important: httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.<br>Security Fix(es):<br><li> httpd: mod_lua: Possible buffer overflow when parsing multipart content (CVE-2021-44790)</li> <li> httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling (CVE-2022-22720)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2022:1137?
The severity of RHSA-2022:1137 is classified as moderate due to potential buffer overflow issues in the Apache HTTP server.
How do I fix RHSA-2022:1137?
To fix RHSA-2022:1137, you should update the affected httpd packages to version 2.4.6-90.el7_7.3 or later.
What vulnerabilities does RHSA-2022:1137 address?
RHSA-2022:1137 addresses vulnerabilities including a possible buffer overflow in mod_lua when parsing multipart content.
Which software packages are affected by RHSA-2022:1137?
The affected software packages include httpd, httpd-debuginfo, httpd-devel, and httpd-tools.
Is RHSA-2022:1137 applicable to all operating systems?
RHSA-2022:1137 is specifically applicable to Red Hat Enterprise Linux versions that utilize the affected httpd packages.