Advisory: CLSA-2022:1656447241
OS: CentOS 6 ELS
Public date: 2022-06-28 00:00:00
Project: httpd
Version: 2.2.15-72.el6.tuxcare.els5
Errata link: https://errata.tuxcare.com/els_os/centos6els/CLSA-2022-1656447241.html
- CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match() - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what the original request hostname was, and so send X-Forwarded-* headers correctly
Update command: yum update httpd*
httpd-tools-2.2.15-72.el6.tuxcare.els5.x86_64.rpm mod_ssl-2.2.15-72.el6.tuxcare.els5.x86_64.rpm httpd-2.2.15-72.el6.tuxcare.els5.x86_64.rpm httpd-devel-2.2.15-72.el6.tuxcare.els5.x86_64.rpm httpd-manual-2.2.15-72.el6.tuxcare.els5.noarch.rpm httpd-devel-2.2.15-72.el6.tuxcare.els5.i686.rpm