Headline

RHSA-2022:1102: Red Hat Security Advisory: httpd:2.4 security update

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

Related CVEs:

CVE-2022-22720: httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling

2 years ago

Red Hat Security Data

Open in Source

#vulnerability #web #linux #red_hat #apache

Synopsis

Important: httpd:2.4 security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for the httpd:2.4 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling (CVE-2022-22720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon will be restarted automatically.

Affected Products

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.2 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.2 ppc64le
Red Hat Enterprise Linux Server - TUS 8.2 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.2 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.2 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.2 x86_64

Fixes

BZ - 2064321 - CVE-2022-22720 httpd: Errors encountered during the discarding of request body lead to HTTP request smuggling

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.2

SRPM

httpd-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.src.rpm

SHA-256: e11f5cf6ff16f752368c175c4671a0c538fdc8f8e985880d7d1ace530ee8bb2b

mod_http2-1.11.3-3.module+el8.2.0+7758+84b4ca3e.1.src.rpm

SHA-256: ff1a6e871eaecf84f1a8647de67b613965c86c64881089ca0b71c0b0859eff4c

mod_md-2.0.8-7.module+el8.2.0+5531+7e4d69a2.src.rpm

SHA-256: ac0b05f049712493b3fcf948e094b58b87ba5687c6efca902e0fa352ca2c184d

x86_64

httpd-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 8ba7b444a67ea0f08843b550eeb3c140ecc74978107813b78070bf2715fad7fb

httpd-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 7fdf39bc936141c1905ffbfff6bb8442984c1ba58bc57d74bfd6d71e9c58b3a6

httpd-debugsource-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: a6cc1cca906691fe8cf36be36456a0bdd8e94689a3e84abd4e4eba1eb078dc8c

httpd-devel-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 847c3dc4e7f78567b9a0347584dd3c543143a4b06546a035e53d1c32913454a8

httpd-filesystem-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.noarch.rpm

SHA-256: 14d12fbfddfb5b73b9df4704f47f13ecb203f3aa9009c0a2bf0e72586f430399

httpd-manual-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.noarch.rpm

SHA-256: be1f0e34802452be8acb9181b7ac80fcc19c2a3d49c5f280b082a3af841e131e

httpd-tools-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 5b2fce4b554c826ec4cfe34ee24e9775663e63bf23c9aaa96c6ea4ee8a8d6803

httpd-tools-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 22f5e3dee9aaae6627c01c8628be39594dc909b54b1c5d21dc3e6076c08837cd

mod_http2-1.11.3-3.module+el8.2.0+7758+84b4ca3e.1.x86_64.rpm

SHA-256: f9292c95f18e14998ab9cc262cac747a10a3e081b0de77237eced90f90474d9e

mod_http2-debuginfo-1.11.3-3.module+el8.2.0+7758+84b4ca3e.1.x86_64.rpm

SHA-256: b0ffc581d9314485ec23649945525640ce980f9fa19a9a25b9c982d3ee4be618

mod_http2-debugsource-1.11.3-3.module+el8.2.0+7758+84b4ca3e.1.x86_64.rpm

SHA-256: 80909b14fb6e73ae34bc3e0c4ae0a14d0314cc45c63d31bbcdb46b1630473405

mod_ldap-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 7084f035c737d41ee1bbfc0f4708b302da862ecfbf662d06f3f5e2894b410ec0

mod_ldap-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: e3a92d136992d675f5b39d281178d422c3d54a69e80c6a39d91bce3929c238f1

mod_md-2.0.8-7.module+el8.2.0+5531+7e4d69a2.x86_64.rpm

SHA-256: 488993a0340198b852a125e8857c25595e6bf0f334b47d2a77613ee8a7fb6d37

mod_md-debuginfo-2.0.8-7.module+el8.2.0+5531+7e4d69a2.x86_64.rpm

SHA-256: b8773d35478dc2149b1098d646e59184ad4e00e17e37972c860858ee5639c1a1

mod_md-debugsource-2.0.8-7.module+el8.2.0+5531+7e4d69a2.x86_64.rpm

SHA-256: 0ff0f0e08de22afce2c2e7cb80ef1ea73925ee27d1c5ff86d45d5669e913826e

mod_proxy_html-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 8599149d5fc57f1ba9d68cd146697acdefe8220b24671d4abc4b53cf9d78940b

mod_proxy_html-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: fb2b9dfb7596568ed6562ee95504487cf81a91608e8bf28536c098cad9114b2e

mod_session-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 14cf3ea2ed24aeff2c3718a506da390a7d6290dac9b2448fadd4a3d85d23b166

mod_session-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: 89b65dd00beb182fe9282d27a8aa0503048e175a0210ad0ada413fe5591c1c0a

mod_ssl-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: a9b5c34c2f1f62e5318a059e135a158ae17672f47762a2d8031d542c431e65a0

mod_ssl-debuginfo-2.4.37-21.module+el8.2.0+14532+bd4c0f23.4.x86_64.rpm

SHA-256: add3bc9ed5ee402f5a719b8673f382aa9e0a2ee914e564b85245c8facd476dae

Red Hat Enterprise Linux Server - AUS 8.2