httpd-2.4.6-97.2.0.1.el7.AXS7

エラータID: AXSA:2021-2543:02

Release date: 
Monday, November 15, 2021 - 09:22
Subject: 
httpd-2.4.6-97.2.0.1.el7.AXS7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Bug Fix(es):

* proxy rewrite to unix socket fails with CVE-2021-40438 fix

CVE-2021-40438
A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. httpd-2.4.6-97.2.0.1.el7.AXS7.src.rpm
    MD5: 2672b7036b44660caa209761d1318860
    SHA-256: e49994abcef1fac6659ed943c8c3d492dd318c668e890db007930b821e0147da
    Size: 4.98 MB

Asianux Server 7 for x86_64
  1. httpd-2.4.6-97.2.0.1.el7.AXS7.x86_64.rpm
    MD5: 0bca04f83707359b4f6a64ef7e3557ad
    SHA-256: 764c973928c0e0b159522932fe23e5b324d07f627620ea196547fcf0a0dca3cf
    Size: 1.19 MB
  2. httpd-devel-2.4.6-97.2.0.1.el7.AXS7.x86_64.rpm
    MD5: 0717e09cfdbf09293a58a801e2bdb344
    SHA-256: 4e0af5e57cca7d8db54b0d0701107680746a7360a21d3019793e25e3e966df35
    Size: 198.75 kB
  3. httpd-manual-2.4.6-97.2.0.1.el7.AXS7.noarch.rpm
    MD5: 922a0e36488973038e11ddbca04d84bc
    SHA-256: 6c11e530155e3012786cd523a9ed5cd126e466884dc25310aed4cf7524c5cd81
    Size: 1.34 MB
  4. httpd-tools-2.4.6-97.2.0.1.el7.AXS7.x86_64.rpm
    MD5: aef0fd3d6b287dcf61426bb663a1c367
    SHA-256: bcd48722e188c9b6fc5518c9ace0b6c20a342e9363c2025d2e5797e84b1c2b17
    Size: 92.60 kB
  5. mod_session-2.4.6-97.2.0.1.el7.AXS7.x86_64.rpm
    MD5: df5b4ac9f314d1795e72ab0c41d7c285
    SHA-256: ea030f31b85e12db49a05f8b99f5692fa7ba8ee480a6420091c55897dfbec243
    Size: 62.65 kB
  6. mod_ssl-2.4.6-97.2.0.1.el7.AXS7.x86_64.rpm
    MD5: d57676e24461520d2ac0a6ed9471a488
    SHA-256: 6dc03714334bddcd391a635fb0cc80dfc64c6740ad59cdbe394327e1d44c4271
    Size: 113.76 kB