Advisory: CLSA-2022:1657643056
OS: CloudLinux 6 ELS
Public date: 2022-07-12 00:00:00
Project: httpd
Version: 2.2.15-73.el6.tuxcare.cl.els5
Errata link: https://errata.tuxcare.com/els_os/cloudlinux6els/CLSA-2022-1657643056.html
- CVE-2022-26377: mod_proxy_ajp: fix HTTP request smuggling - CVE-2022-28615: fix possible out-of-bounds read in ap_strcmp_match() - CVE-2022-31813: mod_proxy: preserve original request headers so an upstream knows what the original request hostname was, and so send X-Forwarded-* headers correctly
Update command: yum update httpd*
httpd-tools-2.2.15-73.el6.tuxcare.cl.els5.x86_64.rpm httpd-manual-2.2.15-73.el6.tuxcare.cl.els5.noarch.rpm mod_ssl-2.2.15-73.el6.tuxcare.cl.els5.x86_64.rpm httpd-2.2.15-73.el6.tuxcare.cl.els5.x86_64.rpm httpd-devel-2.2.15-73.el6.tuxcare.cl.els5.i686.rpm httpd-devel-2.2.15-73.el6.tuxcare.cl.els5.x86_64.rpm