RHSA-2023:1593: Important: httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.Security Fix(es): httpd: HTTP request splitting with modrewrite and modproxy (CVE-2023-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1593?
The severity of RHSA-2023:1593 is classified as moderate due to the potential for HTTP request splitting with mod_rewrite and mod_proxy.
How do I fix RHSA-2023:1593?
To resolve RHSA-2023:1593, update your httpd package to version 2.4.6-98.el7_9.7 or later.
What is CVE-2023-25690 related to RHSA-2023:1593?
CVE-2023-25690 refers to the vulnerability that allows HTTP request splitting when using mod_rewrite and mod_proxy in httpd.
Which packages are affected by RHSA-2023:1593?
The affected packages include httpd, httpd-debuginfo, httpd-devel, httpd-manual, and httpd-tools for versions before 2.4.6-98.el7_9.7.
Is a reboot required after applying the fix for RHSA-2023:1593?
No, a reboot is not required after applying the update for RHSA-2023:1593.