httpd-2.4.57-11.el9_4.1

エラータID: AXSA:2024-8647:03

Release date: 
Friday, August 9, 2024 - 15:16
Subject: 
httpd-2.4.57-11.el9_4.1
Affected Channels: 
MIRACLE LINUX 9 for x86_64
Severity: 
High
Description: 

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.

Security Fix(es):

* httpd: Security issues via?backend applications whose response headers are malicious or exploitable (CVE-2024-38476)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-38476
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Solution: 

Update packages.

CVEs: 
CVE-2024-38476
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable. Users are recommended to upgrade to version 2.4.60, which fixes this issue.
Additional Info: 

N/A

Download: 

SRPMS
  1. httpd-2.4.57-11.el9_4.1.src.rpm
    MD5: ab860d9ce64eb0aced4373c08e2d7672
    SHA-256: 2a4007fe38e5bec1ea9c0eb35cd121b12cc0a210a0ae02ce7a8e4cc7747a3da9
    Size: 7.61 MB

Asianux Server 9 for x86_64
  1. httpd-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: 8bb08e12c0d60a36988b445098164a32
    SHA-256: 3a21c218de08809d48cbf6185f4fc3493a1c383a3ac9315b1fccae806ccda2c8
    Size: 49.81 kB
  2. httpd-core-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: 77a06791db5153358fd83d957f7e6ff2
    SHA-256: 5cb49cdd90d69731ede3c2a7972a5b6f6de8218f04e0e3a5b90535f8faddf422
    Size: 1.47 MB
  3. httpd-devel-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: d71192c2de0007d0f734c0cc434fb93a
    SHA-256: f6b03b490379c99eeae42226907c903963234ca0cc1f49395f26b9d2bb7ed93f
    Size: 208.44 kB
  4. httpd-filesystem-2.4.57-11.el9_4.1.noarch.rpm
    MD5: 74724c6ab1fd4edd08f3f35371bba9d6
    SHA-256: c1ea8cf396a902853e2cbdefa4c70363c2b2c6c9c3c152b21220d14afbb641c2
    Size: 10.64 kB
  5. httpd-manual-2.4.57-11.el9_4.1.noarch.rpm
    MD5: abe1bda20426e01b84d9f84784b8d099
    SHA-256: 94c7a26d5acb79fe851592a78137d698f1babd8b69b4c505f3faf1fe0d0d5397
    Size: 2.29 MB
  6. httpd-tools-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: d5240e2869ef9864ce09733d4e2ddbb4
    SHA-256: f92894f63532dd3d260dea73de12cd7a631e101bfcc23c88a3d9e04590cab1f5
    Size: 83.58 kB
  7. mod_ldap-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: f5916ec836c3672c89fcd6a96c21bedd
    SHA-256: 2f1412dee321cfe59a1040cea59ab8ab5eed14af3e9529d4ba8db78ecb6d0f39
    Size: 59.12 kB
  8. mod_lua-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: 51fc66c9b6ee13bff566715309049da9
    SHA-256: 8d2d14fdc495d2dd49f665d36bd0cb580b41a3b6d199f19875f4d5400fb8576b
    Size: 58.14 kB
  9. mod_proxy_html-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: 25ce917607edc9bcf32e0f55101fa21c
    SHA-256: d87b30b9fc6856cca06940ec3a2f0a1b426695c67f63b7baf8ab1231a8f938d2
    Size: 33.93 kB
  10. mod_session-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: e7a7d31900e0d3d2d1bf4aaed8d6efa0
    SHA-256: 32bd810c6bec2c25277461851772a41f38365a9c7d8d822d385e041a7802f18a
    Size: 46.01 kB
  11. mod_ssl-2.4.57-11.el9_4.1.x86_64.rpm
    MD5: 08ef30c856ed700258af406062660502
    SHA-256: ff45ff826a45e4cad94f82fa84af8c0b8a5ba0045bc130e7e8f1bd06d0a5fa4e
    Size: 107.90 kB