Release Info

Advisory: CLSA-2022:1648136177

OS: CentOS 6 ELS

Public date: 2022-03-24 00:00:00

Project: httpd

Version: 2.2.15-72.el6.tuxcare.els4

Errata link: https://errata.tuxcare.com/els_os/centos6els/CLSA-2022-1648136177.html

Changelog

- CVE-2022-22720: simpler connection close logic if discarding the request body fails - CVE-2022-22721: make sure and check that LimitXMLRequestBody fits in system memory

Update

Update command: yum update httpd*

Packages list

httpd-devel-2.2.15-72.el6.tuxcare.els4.i686.rpm mod_ssl-2.2.15-72.el6.tuxcare.els4.x86_64.rpm httpd-devel-2.2.15-72.el6.tuxcare.els4.x86_64.rpm httpd-tools-2.2.15-72.el6.tuxcare.els4.x86_64.rpm httpd-manual-2.2.15-72.el6.tuxcare.els4.noarch.rpm httpd-2.2.15-72.el6.tuxcare.els4.x86_64.rpm

CVEs

CVE-2022-22721
CVE-2022-22720