Advisory: CLSA-2022:1656429967
OS: CentOS 8.4 ELS
Public date: 2022-06-28 00:00:00
Project: httpd
Version: 2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.els6
Errata link: https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2022-1656429967.html
- CVE-2022-30522: mod_sed: limit memory usage - CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match() - CVE-2022-30556: mod_lua: fix r:wsread() to not return length that point past the end of the storage allocated for the buffer - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what the original request hostname was, and so send X-Forwarded-* headers correctly
Update command: dnf update httpd*
httpd-tools-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm mod_ssl-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm mod_md-2.0.8-8.module_el8.4.0+2061+54659116.x86_64.rpm httpd-devel-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm httpd-manual-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.noarch.rpm mod_ldap-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm mod_session-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm httpd-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm httpd-devel-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.i686.rpm httpd-filesystem-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.noarch.rpm mod_proxy_html-2.4.37-39.module_el8.4.0+2061+54659116.1.tuxcare.centos8.4-els.x86_64.rpm mod_http2-1.15.7-3.module_el8.4.0+2061+54659116.x86_64.rpm