RHSA-2021:3836: Important: httpd:2.4 security update

First published: Wed Oct 13 2021(Updated: )

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.<br>Security Fix(es):<br><li> httpd: mod_proxy: SSRF via a crafted request uri-path containing "unix:" (CVE-2021-40438)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RHSA-2021:3836: Important: httpd:2.4 security update

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact

Affected Software	Affected Version	How to fix
redhat/httpd	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debugsource	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-devel	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-filesystem	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-manual	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debugsource	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-devel	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-debugsource	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-devel	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd-tools-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1	2.4.37-21.module+el8.2.0+12904+53ee7aba.1
redhat/httpd	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa
redhat/httpd-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa
redhat/httpd-debugsource	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa
redhat/httpd-devel	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa
redhat/httpd-tools	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa
redhat/httpd-tools-debuginfo	<2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa	2.4.37-21.module+el8.2.0+12904+53ee7aba.1.aa