RHSA-2023:7625
- Source
- https://access.redhat.com/errata/RHSA-2023:7625
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2023:7625.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2023:7625
- Related
- Published
- 2024-09-13T21:19:05Z
- Modified
- 2024-12-05T10:02:01Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP2 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2023:7625
- https://access.redhat.com/security/updates/classification/#important
- https://bugzilla.redhat.com/show_bug.cgi?id=2181082
- https://bugzilla.redhat.com/show_bug.cgi?id=2182561
- https://bugzilla.redhat.com/show_bug.cgi?id=2182565
- https://bugzilla.redhat.com/show_bug.cgi?id=2207947
- https://bugzilla.redhat.com/show_bug.cgi?id=2224962
- https://bugzilla.redhat.com/show_bug.cgi?id=2227852
- https://bugzilla.redhat.com/show_bug.cgi?id=2238847
- https://bugzilla.redhat.com/show_bug.cgi?id=2239135
- https://bugzilla.redhat.com/show_bug.cgi?id=2241933
- https://bugzilla.redhat.com/show_bug.cgi?id=2241938
- https://bugzilla.redhat.com/show_bug.cgi?id=2243877
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7625.json
- https://access.redhat.com/security/cve/CVE-2023-0464
- https://www.cve.org/CVERecord?id=CVE-2023-0464
- https://nvd.nist.gov/vuln/detail/CVE-2023-0464
- https://www.openssl.org/news/secadv/20230322.txt
- https://access.redhat.com/security/cve/CVE-2023-0465
- https://www.cve.org/CVERecord?id=CVE-2023-0465
- https://nvd.nist.gov/vuln/detail/CVE-2023-0465
- https://www.openssl.org/news/secadv/20230328.txt
- https://access.redhat.com/security/cve/CVE-2023-0466
- https://www.cve.org/CVERecord?id=CVE-2023-0466
- https://nvd.nist.gov/vuln/detail/CVE-2023-0466
- https://access.redhat.com/security/cve/CVE-2023-2650
- https://www.cve.org/CVERecord?id=CVE-2023-2650
- https://nvd.nist.gov/vuln/detail/CVE-2023-2650
- https://www.openssl.org/news/secadv/20230530.txt
- https://access.redhat.com/security/cve/CVE-2023-3446
- https://www.cve.org/CVERecord?id=CVE-2023-3446
- https://nvd.nist.gov/vuln/detail/CVE-2023-3446
- https://www.openssl.org/news/secadv/20230719.txt
- https://access.redhat.com/security/cve/CVE-2023-3817
- https://www.cve.org/CVERecord?id=CVE-2023-3817
- https://nvd.nist.gov/vuln/detail/CVE-2023-3817
- https://www.openssl.org/news/secadv/20230731.txt
- https://access.redhat.com/security/cve/CVE-2023-38039
- https://www.cve.org/CVERecord?id=CVE-2023-38039
- https://nvd.nist.gov/vuln/detail/CVE-2023-38039
- https://curl.se/docs/CVE-2023-38039.html
- https://access.redhat.com/security/cve/CVE-2023-38545
- https://www.cve.org/CVERecord?id=CVE-2023-38545
- https://nvd.nist.gov/vuln/detail/CVE-2023-38545
- https://curl.se/docs/CVE-2023-38545.html
- https://access.redhat.com/security/cve/CVE-2023-38546
- https://access.redhat.com/errata/RHSA-2024:2101
- https://www.cve.org/CVERecord?id=CVE-2023-38546
- https://nvd.nist.gov/vuln/detail/CVE-2023-38546
- https://curl.se/docs/CVE-2023-38546.html
- https://access.redhat.com/security/cve/CVE-2023-41081
- https://www.cve.org/CVERecord?id=CVE-2023-41081
- https://nvd.nist.gov/vuln/detail/CVE-2023-41081
- https://lists.apache.org/thread/rd1r26w7271jyqgzr4492tooyt583d8b
- https://access.redhat.com/security/cve/CVE-2023-45802
- https://www.cve.org/CVERecord?id=CVE-2023-45802
- https://nvd.nist.gov/vuln/detail/CVE-2023-45802
- https://httpd.apache.org/security/vulnerabilities_24.html
Affected packages
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl
Package
- Name
- jbcs-httpd24-openssl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-debuginfo
Package
- Name
- jbcs-httpd24-openssl-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-devel
Package
- Name
- jbcs-httpd24-openssl-devel
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-libs
Package
- Name
- jbcs-httpd24-openssl-libs
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-perl
Package
- Name
- jbcs-httpd24-openssl-perl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-static
Package
- Name
- jbcs-httpd24-openssl-static
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl
Package
- Name
- jbcs-httpd24-openssl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-debuginfo
Package
- Name
- jbcs-httpd24-openssl-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-devel
Package
- Name
- jbcs-httpd24-openssl-devel
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-devel
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-libs
Package
- Name
- jbcs-httpd24-openssl-libs
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-libs
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-libs-debuginfo
Package
- Name
- jbcs-httpd24-openssl-libs-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-libs-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-perl
Package
- Name
- jbcs-httpd24-openssl-perl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-perl
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-openssl-static
Package
- Name
- jbcs-httpd24-openssl-static
- Purl
- pkg:rpm/redhat/jbcs-httpd24-openssl-static
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-curl
Package
- Name
- jbcs-httpd24-curl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-curl-debuginfo
Package
- Name
- jbcs-httpd24-curl-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-libcurl
Package
- Name
- jbcs-httpd24-libcurl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-libcurl-devel
Package
- Name
- jbcs-httpd24-libcurl-devel
- Purl
- pkg:rpm/redhat/jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-curl
Package
- Name
- jbcs-httpd24-curl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-curl
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-curl-debuginfo
Package
- Name
- jbcs-httpd24-curl-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-curl-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-libcurl
Package
- Name
- jbcs-httpd24-libcurl
- Purl
- pkg:rpm/redhat/jbcs-httpd24-libcurl
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-libcurl-debuginfo
Package
- Name
- jbcs-httpd24-libcurl-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-libcurl-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-libcurl-devel
Package
- Name
- jbcs-httpd24-libcurl-devel
- Purl
- pkg:rpm/redhat/jbcs-httpd24-libcurl-devel
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk
Package
- Name
- jbcs-httpd24-mod_jk
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-ap24
Package
- Name
- jbcs-httpd24-mod_jk-ap24
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-debuginfo
Package
- Name
- jbcs-httpd24-mod_jk-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk
Package
- Name
- jbcs-httpd24-mod_jk
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24
Package
- Name
- jbcs-httpd24-mod_jk-ap24
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24-debuginfo
Package
- Name
- jbcs-httpd24-mod_jk-ap24-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2
Package
- Name
- jbcs-httpd24-mod_http2
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_http2
Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2-debuginfo
Package
- Name
- jbcs-httpd24-mod_http2-debuginfo
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo
Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2
Package
- Name
- jbcs-httpd24-mod_http2
- Purl
- pkg:rpm/redhat/jbcs-httpd24-mod_http2