Release Info

- CVE-2024-38474: mod_rewrite: server weakness with encoded question marks in backreferences - CVE-2024-38475: mod_rewrite: server weakness in mod_rewrite when first segment of substitution matches filesystem path - CVE-2024-38477: mod_proxy: crash resulting in Denial of Service in mod_proxy via a malicious request - CVE-2024-38473: mod_proxy: server proxy encoding problem - CVE-2024-39573: mod_rewrite: proxy handler substitution - CVE-2024-38476: http: server use exploitable/malicious backend application output to run local handlers via internal redirect - CVE-2024-39884: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-38476 fix - CVE-2024-40725: modules: source code disclosure with handlers configured via AddType. Resolving regression introduced by CVE-2024-39884 fix

Update command: dnf update httpd*

httpd-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm httpd-core-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm httpd-devel-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm httpd-filesystem-2.4.53-11.el9_2.5.tuxcare.els3.noarch.rpm httpd-manual-2.4.53-11.el9_2.5.tuxcare.els3.noarch.rpm httpd-tools-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm mod_ldap-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm mod_lua-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm mod_proxy_html-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm mod_session-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm mod_ssl-2.4.53-11.el9_2.5.tuxcare.els3.x86_64.rpm