RHSA-2024:5239

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2024:5239

Import Source

https://security.access.redhat.com/data/osv/RHSA-2024:5239.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2024:5239

Related

Published

2024-09-25T17:00:54Z

Modified

2024-11-06T06:38:49Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.57 SP5 security update

Details

References

Affected packages

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.19-41.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.19-41.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-debuginfo

Package

Name: jbcs-httpd24-mod_jk-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.24-11.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.24-11.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_cluster

Package

Name: jbcs-httpd24-mod_proxy_cluster
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.20-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_cluster-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_cluster-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.20-8.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.3-40.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.3-40.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el7jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools-debuginfo

Package

Name: jbcs-httpd24-httpd-tools-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.19-41.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.19-41.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24-debuginfo

Package

Name: jbcs-httpd24-mod_jk-ap24-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.49-11.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap-debuginfo

Package

Name: jbcs-httpd24-mod_ldap-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.24-11.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.24-11.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_cluster

Package

Name: jbcs-httpd24-mod_proxy_cluster
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.20-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_cluster-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_cluster-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_cluster-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.20-8.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_html-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.3-40.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.3-40.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session-debuginfo

Package

Name: jbcs-httpd24-mod_session-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl-debuginfo

Package

Name: jbcs-httpd24-mod_ssl-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.57-13.el8jbcs