RHSA-2025:3452

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2025:3452

Import Source

https://security.access.redhat.com/data/osv/RHSA-2025:3452.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2025:3452

Upstream

CVE-2024-24795

CVE-2024-36387

CVE-2024-5535

Published

2025-04-03T10:06:55Z

Modified

2025-08-21T10:47:03.651500Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 security update

Details

References

Affected packages

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl

Package

Name: jbcs-httpd24-openssl
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-debuginfo

Package

Name: jbcs-httpd24-openssl-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-devel

Package

Name: jbcs-httpd24-openssl-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-libs

Package

Name: jbcs-httpd24-openssl-libs
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-perl

Package

Name: jbcs-httpd24-openssl-perl
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl-perl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-openssl-static

Package

Name: jbcs-httpd24-openssl-static
Purl: pkg:rpm/redhat/jbcs-httpd24-openssl-static

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:1.1.1k-19.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el7jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools-debuginfo

Package

Name: jbcs-httpd24-httpd-tools-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap-debuginfo

Package

Name: jbcs-httpd24-mod_ldap-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_html-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session-debuginfo

Package

Name: jbcs-httpd24-mod_session-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl-debuginfo

Package

Name: jbcs-httpd24-mod_ssl-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.62-5.el8jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-3.el7jbcs

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-3.el7jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-3.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.0.29-3.el8jbcs