RHSA-2023:1670: Important: httpd and mod_http2 security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.Security Fix(es): httpd: HTTP request splitting with modrewrite and modproxy (CVE-2023-25690) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2023:1670?
The severity of RHSA-2023:1670 is classified as high due to the potential for HTTP request splitting vulnerabilities.
How do I fix RHSA-2023:1670?
To fix RHSA-2023:1670, update your Apache HTTP Server packages to version 2.4.53-7.el9_1.5 or greater.
What systems are affected by RHSA-2023:1670?
RHSA-2023:1670 affects systems running the Apache HTTP Server versions prior to 2.4.53-7.el9_1.5.
What vulnerabilities are addressed in RHSA-2023:1670?
RHSA-2023:1670 addresses an HTTP request splitting vulnerability identified as CVE-2023-25690.
Is a restart required after applying the fix for RHSA-2023:1670?
Yes, a restart of the Apache HTTP Server is required after applying the fix for RHSA-2023:1670.