Advisory: CLSA-2022:1656430448
OS: CentOS 8.5 ELS
Public date: 2022-06-28 00:00:00
Project: httpd
Version: 1.15.7-3.module_el8.5.0+2060+6f259f31
Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2022-1656430448.html
- CVE-2022-30522: mod_sed: limit memory usage - CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match() - CVE-2022-30556: mod_lua: fix r:wsread() to not return length that point past the end of the storage allocated for the buffer - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what the original request hostname was, and so send X-Forwarded-* headers correctly
Update command: dnf update httpd*
mod_http2-1.15.7-3.module_el8.5.0+2060+6f259f31.x86_64.rpm httpd-filesystem-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.noarch.rpm httpd-devel-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.i686.rpm mod_proxy_html-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm mod_md-2.0.8-8.module_el8.5.0+2060+6f259f31.x86_64.rpm httpd-tools-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm httpd-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm mod_ssl-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm httpd-manual-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.noarch.rpm mod_session-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm mod_ldap-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm httpd-devel-2.4.37-43.module_el8.5.0+2060+6f259f31.tuxcare.els5.x86_64.rpm