Alibaba Cloud Linux 2.1903 Security Advisory: ALINUX2-SA-2024:0037
Issued: 2024-11-20
Updated: 2024-11-20
Summary
httpd security update
Severity
Important
Description
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities:
CVE-2024-38476:
Vulnerability in core of Apache HTTP Server 2.4.59 and earlier are vulnerably to information disclosure, SSRF or local script execution via backend applications whose response headers are malicious or exploitable.
Users are recommended to upgrade to version 2.4.60, which fixes this issue.
References
Updated Packages
- aarch64
- httpd-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- httpd-debuginfo-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- httpd-devel-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- httpd-tools-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- mod_ldap-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- mod_proxy_html-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- mod_session-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- mod_ssl-2.4.6-99.1.al7.3.aarch64.rpm → (download)
- i686
- httpd-2.4.6-99.1.al7.3.i686.rpm → (download)
- httpd-debuginfo-2.4.6-99.1.al7.3.i686.rpm → (download)
- httpd-devel-2.4.6-99.1.al7.3.i686.rpm → (download)
- httpd-tools-2.4.6-99.1.al7.3.i686.rpm → (download)
- mod_ldap-2.4.6-99.1.al7.3.i686.rpm → (download)
- mod_proxy_html-2.4.6-99.1.al7.3.i686.rpm → (download)
- mod_session-2.4.6-99.1.al7.3.i686.rpm → (download)
- mod_ssl-2.4.6-99.1.al7.3.i686.rpm → (download)
- src
- httpd-2.4.6-99.1.al7.3.src.rpm → (download)
- x86_64
- httpd-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- httpd-debuginfo-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- httpd-devel-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- httpd-tools-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- mod_ldap-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- mod_proxy_html-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- mod_session-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- mod_ssl-2.4.6-99.1.al7.3.x86_64.rpm → (download)
- noarch
- httpd-manual-2.4.6-99.1.al7.3.noarch.rpm → (download)