-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: httpd security, bug fix, and enhancement update
Advisory ID:       RHSA-2022:8067-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2022:8067
Issue date:        2022-11-15
CVE Names:         CVE-2022-22719 CVE-2022-22721 CVE-2022-23943 
                   CVE-2022-26377 CVE-2022-28614 CVE-2022-28615 
                   CVE-2022-29404 CVE-2022-30522 CVE-2022-30556 
                   CVE-2022-31813 
====================================================================
1. Summary:

An update for httpd is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AppStream (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64

3. Description:

The httpd packages provide the Apache HTTP Server, a powerful, efficient,
and extensible web server.

The following packages have been upgraded to a later upstream version:
httpd (2.4.53). (BZ#2079939)

Security Fix(es):

* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)

* httpd: mod_lua: Use of uninitialized value of in r:parsebody
(CVE-2022-22719)

* httpd: core: Possible buffer overflow with very large or unlimited
LimitXMLRequestBody (CVE-2022-22721)

* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)

* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)

* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)

* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism
(CVE-2022-31813)

* httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614)

* httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)

* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat
Enterprise Linux 9.1 Release Notes linked from the References section.

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

After installing the updated packages, the httpd daemon will be restarted
automatically.

5. Bugs fixed (https://bugzilla.redhat.com/):

2064319 - CVE-2022-23943 httpd: mod_sed: Read/write beyond bounds
2064320 - CVE-2022-22721 httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
2064322 - CVE-2022-22719 httpd: mod_lua: Use of uninitialized value of in r:parsebody
2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.
2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending with core
2079939 - httpd rebase to 2.4.53
2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling
2095002 - CVE-2022-28614 httpd: Out-of-bounds read via ap_rwrite()
2095006 - CVE-2022-28615 httpd: Out-of-bounds read in ap_strcmp_match()
2095012 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
2095015 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
2095018 - CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets
2095020 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism
2095838 - mod_mime_magic: invalid type 0 in mconvert()

6. Package List:

Red Hat Enterprise Linux AppStream (v. 9):

Source:
httpd-2.4.53-7.el9.src.rpm

aarch64:
httpd-2.4.53-7.el9.aarch64.rpm
httpd-core-2.4.53-7.el9.aarch64.rpm
httpd-core-debuginfo-2.4.53-7.el9.aarch64.rpm
httpd-debuginfo-2.4.53-7.el9.aarch64.rpm
httpd-debugsource-2.4.53-7.el9.aarch64.rpm
httpd-devel-2.4.53-7.el9.aarch64.rpm
httpd-tools-2.4.53-7.el9.aarch64.rpm
httpd-tools-debuginfo-2.4.53-7.el9.aarch64.rpm
mod_ldap-2.4.53-7.el9.aarch64.rpm
mod_ldap-debuginfo-2.4.53-7.el9.aarch64.rpm
mod_lua-2.4.53-7.el9.aarch64.rpm
mod_lua-debuginfo-2.4.53-7.el9.aarch64.rpm
mod_proxy_html-2.4.53-7.el9.aarch64.rpm
mod_proxy_html-debuginfo-2.4.53-7.el9.aarch64.rpm
mod_session-2.4.53-7.el9.aarch64.rpm
mod_session-debuginfo-2.4.53-7.el9.aarch64.rpm
mod_ssl-2.4.53-7.el9.aarch64.rpm
mod_ssl-debuginfo-2.4.53-7.el9.aarch64.rpm

noarch:
httpd-filesystem-2.4.53-7.el9.noarch.rpm
httpd-manual-2.4.53-7.el9.noarch.rpm

ppc64le:
httpd-2.4.53-7.el9.ppc64le.rpm
httpd-core-2.4.53-7.el9.ppc64le.rpm
httpd-core-debuginfo-2.4.53-7.el9.ppc64le.rpm
httpd-debuginfo-2.4.53-7.el9.ppc64le.rpm
httpd-debugsource-2.4.53-7.el9.ppc64le.rpm
httpd-devel-2.4.53-7.el9.ppc64le.rpm
httpd-tools-2.4.53-7.el9.ppc64le.rpm
httpd-tools-debuginfo-2.4.53-7.el9.ppc64le.rpm
mod_ldap-2.4.53-7.el9.ppc64le.rpm
mod_ldap-debuginfo-2.4.53-7.el9.ppc64le.rpm
mod_lua-2.4.53-7.el9.ppc64le.rpm
mod_lua-debuginfo-2.4.53-7.el9.ppc64le.rpm
mod_proxy_html-2.4.53-7.el9.ppc64le.rpm
mod_proxy_html-debuginfo-2.4.53-7.el9.ppc64le.rpm
mod_session-2.4.53-7.el9.ppc64le.rpm
mod_session-debuginfo-2.4.53-7.el9.ppc64le.rpm
mod_ssl-2.4.53-7.el9.ppc64le.rpm
mod_ssl-debuginfo-2.4.53-7.el9.ppc64le.rpm

s390x:
httpd-2.4.53-7.el9.s390x.rpm
httpd-core-2.4.53-7.el9.s390x.rpm
httpd-core-debuginfo-2.4.53-7.el9.s390x.rpm
httpd-debuginfo-2.4.53-7.el9.s390x.rpm
httpd-debugsource-2.4.53-7.el9.s390x.rpm
httpd-devel-2.4.53-7.el9.s390x.rpm
httpd-tools-2.4.53-7.el9.s390x.rpm
httpd-tools-debuginfo-2.4.53-7.el9.s390x.rpm
mod_ldap-2.4.53-7.el9.s390x.rpm
mod_ldap-debuginfo-2.4.53-7.el9.s390x.rpm
mod_lua-2.4.53-7.el9.s390x.rpm
mod_lua-debuginfo-2.4.53-7.el9.s390x.rpm
mod_proxy_html-2.4.53-7.el9.s390x.rpm
mod_proxy_html-debuginfo-2.4.53-7.el9.s390x.rpm
mod_session-2.4.53-7.el9.s390x.rpm
mod_session-debuginfo-2.4.53-7.el9.s390x.rpm
mod_ssl-2.4.53-7.el9.s390x.rpm
mod_ssl-debuginfo-2.4.53-7.el9.s390x.rpm

x86_64:
httpd-2.4.53-7.el9.x86_64.rpm
httpd-core-2.4.53-7.el9.x86_64.rpm
httpd-core-debuginfo-2.4.53-7.el9.x86_64.rpm
httpd-debuginfo-2.4.53-7.el9.x86_64.rpm
httpd-debugsource-2.4.53-7.el9.x86_64.rpm
httpd-devel-2.4.53-7.el9.x86_64.rpm
httpd-tools-2.4.53-7.el9.x86_64.rpm
httpd-tools-debuginfo-2.4.53-7.el9.x86_64.rpm
mod_ldap-2.4.53-7.el9.x86_64.rpm
mod_ldap-debuginfo-2.4.53-7.el9.x86_64.rpm
mod_lua-2.4.53-7.el9.x86_64.rpm
mod_lua-debuginfo-2.4.53-7.el9.x86_64.rpm
mod_proxy_html-2.4.53-7.el9.x86_64.rpm
mod_proxy_html-debuginfo-2.4.53-7.el9.x86_64.rpm
mod_session-2.4.53-7.el9.x86_64.rpm
mod_session-debuginfo-2.4.53-7.el9.x86_64.rpm
mod_ssl-2.4.53-7.el9.x86_64.rpm
mod_ssl-debuginfo-2.4.53-7.el9.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2022-22719
https://access.redhat.com/security/cve/CVE-2022-22721
https://access.redhat.com/security/cve/CVE-2022-23943
https://access.redhat.com/security/cve/CVE-2022-26377
https://access.redhat.com/security/cve/CVE-2022-28614
https://access.redhat.com/security/cve/CVE-2022-28615
https://access.redhat.com/security/cve/CVE-2022-29404
https://access.redhat.com/security/cve/CVE-2022-30522
https://access.redhat.com/security/cve/CVE-2022-30556
https://access.redhat.com/security/cve/CVE-2022-31813
https://access.redhat.com/security/updates/classification/#moderate
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2022 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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hHrA
-----END PGP SIGNATURE-----
--
RHSA-announce mailing list
RHSA-announce@redhat.com
https://listman.redhat.com/mailman/listinfo/rhsa-announce

RedHat: RHSA-2022-8067:01 Moderate: httpd security, bug fix,

An update for httpd is now available for Red Hat Enterprise Linux 9

Summary

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
The following packages have been upgraded to a later upstream version: httpd (2.4.53). (BZ#2079939)
Security Fix(es):
* httpd: mod_sed: Read/write beyond bounds (CVE-2022-23943)
* httpd: mod_lua: Use of uninitialized value of in r:parsebody (CVE-2022-22719)
* httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVE-2022-22721)
* httpd: mod_proxy_ajp: Possible request smuggling (CVE-2022-26377)
* httpd: mod_lua: DoS in r:parsebody (CVE-2022-29404)
* httpd: mod_sed: DoS vulnerability (CVE-2022-30522)
* httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism (CVE-2022-31813)
* httpd: Out-of-bounds read via ap_rwrite() (CVE-2022-28614)
* httpd: Out-of-bounds read in ap_strcmp_match() (CVE-2022-28615)
* httpd: mod_lua: Information disclosure with websockets (CVE-2022-30556)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes linked from the References section.



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
After installing the updated packages, the httpd daemon will be restarted automatically.

References

https://access.redhat.com/security/cve/CVE-2022-22719 https://access.redhat.com/security/cve/CVE-2022-22721 https://access.redhat.com/security/cve/CVE-2022-23943 https://access.redhat.com/security/cve/CVE-2022-26377 https://access.redhat.com/security/cve/CVE-2022-28614 https://access.redhat.com/security/cve/CVE-2022-28615 https://access.redhat.com/security/cve/CVE-2022-29404 https://access.redhat.com/security/cve/CVE-2022-30522 https://access.redhat.com/security/cve/CVE-2022-30556 https://access.redhat.com/security/cve/CVE-2022-31813 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index

Package List

Red Hat Enterprise Linux AppStream (v. 9):
Source: httpd-2.4.53-7.el9.src.rpm
aarch64: httpd-2.4.53-7.el9.aarch64.rpm httpd-core-2.4.53-7.el9.aarch64.rpm httpd-core-debuginfo-2.4.53-7.el9.aarch64.rpm httpd-debuginfo-2.4.53-7.el9.aarch64.rpm httpd-debugsource-2.4.53-7.el9.aarch64.rpm httpd-devel-2.4.53-7.el9.aarch64.rpm httpd-tools-2.4.53-7.el9.aarch64.rpm httpd-tools-debuginfo-2.4.53-7.el9.aarch64.rpm mod_ldap-2.4.53-7.el9.aarch64.rpm mod_ldap-debuginfo-2.4.53-7.el9.aarch64.rpm mod_lua-2.4.53-7.el9.aarch64.rpm mod_lua-debuginfo-2.4.53-7.el9.aarch64.rpm mod_proxy_html-2.4.53-7.el9.aarch64.rpm mod_proxy_html-debuginfo-2.4.53-7.el9.aarch64.rpm mod_session-2.4.53-7.el9.aarch64.rpm mod_session-debuginfo-2.4.53-7.el9.aarch64.rpm mod_ssl-2.4.53-7.el9.aarch64.rpm mod_ssl-debuginfo-2.4.53-7.el9.aarch64.rpm
noarch: httpd-filesystem-2.4.53-7.el9.noarch.rpm httpd-manual-2.4.53-7.el9.noarch.rpm
ppc64le: httpd-2.4.53-7.el9.ppc64le.rpm httpd-core-2.4.53-7.el9.ppc64le.rpm httpd-core-debuginfo-2.4.53-7.el9.ppc64le.rpm httpd-debuginfo-2.4.53-7.el9.ppc64le.rpm httpd-debugsource-2.4.53-7.el9.ppc64le.rpm httpd-devel-2.4.53-7.el9.ppc64le.rpm httpd-tools-2.4.53-7.el9.ppc64le.rpm httpd-tools-debuginfo-2.4.53-7.el9.ppc64le.rpm mod_ldap-2.4.53-7.el9.ppc64le.rpm mod_ldap-debuginfo-2.4.53-7.el9.ppc64le.rpm mod_lua-2.4.53-7.el9.ppc64le.rpm mod_lua-debuginfo-2.4.53-7.el9.ppc64le.rpm mod_proxy_html-2.4.53-7.el9.ppc64le.rpm mod_proxy_html-debuginfo-2.4.53-7.el9.ppc64le.rpm mod_session-2.4.53-7.el9.ppc64le.rpm mod_session-debuginfo-2.4.53-7.el9.ppc64le.rpm mod_ssl-2.4.53-7.el9.ppc64le.rpm mod_ssl-debuginfo-2.4.53-7.el9.ppc64le.rpm
s390x: httpd-2.4.53-7.el9.s390x.rpm httpd-core-2.4.53-7.el9.s390x.rpm httpd-core-debuginfo-2.4.53-7.el9.s390x.rpm httpd-debuginfo-2.4.53-7.el9.s390x.rpm httpd-debugsource-2.4.53-7.el9.s390x.rpm httpd-devel-2.4.53-7.el9.s390x.rpm httpd-tools-2.4.53-7.el9.s390x.rpm httpd-tools-debuginfo-2.4.53-7.el9.s390x.rpm mod_ldap-2.4.53-7.el9.s390x.rpm mod_ldap-debuginfo-2.4.53-7.el9.s390x.rpm mod_lua-2.4.53-7.el9.s390x.rpm mod_lua-debuginfo-2.4.53-7.el9.s390x.rpm mod_proxy_html-2.4.53-7.el9.s390x.rpm mod_proxy_html-debuginfo-2.4.53-7.el9.s390x.rpm mod_session-2.4.53-7.el9.s390x.rpm mod_session-debuginfo-2.4.53-7.el9.s390x.rpm mod_ssl-2.4.53-7.el9.s390x.rpm mod_ssl-debuginfo-2.4.53-7.el9.s390x.rpm
x86_64: httpd-2.4.53-7.el9.x86_64.rpm httpd-core-2.4.53-7.el9.x86_64.rpm httpd-core-debuginfo-2.4.53-7.el9.x86_64.rpm httpd-debuginfo-2.4.53-7.el9.x86_64.rpm httpd-debugsource-2.4.53-7.el9.x86_64.rpm httpd-devel-2.4.53-7.el9.x86_64.rpm httpd-tools-2.4.53-7.el9.x86_64.rpm httpd-tools-debuginfo-2.4.53-7.el9.x86_64.rpm mod_ldap-2.4.53-7.el9.x86_64.rpm mod_ldap-debuginfo-2.4.53-7.el9.x86_64.rpm mod_lua-2.4.53-7.el9.x86_64.rpm mod_lua-debuginfo-2.4.53-7.el9.x86_64.rpm mod_proxy_html-2.4.53-7.el9.x86_64.rpm mod_proxy_html-debuginfo-2.4.53-7.el9.x86_64.rpm mod_session-2.4.53-7.el9.x86_64.rpm mod_session-debuginfo-2.4.53-7.el9.x86_64.rpm mod_ssl-2.4.53-7.el9.x86_64.rpm mod_ssl-debuginfo-2.4.53-7.el9.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2022:8067-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2022:8067
Issued Date: : 2022-11-15
CVE Names: CVE-2022-22719 CVE-2022-22721 CVE-2022-23943 CVE-2022-26377 CVE-2022-28614 CVE-2022-28615 CVE-2022-29404 CVE-2022-30522 CVE-2022-30556 CVE-2022-31813

Topic

An update for httpd is now available for Red Hat Enterprise Linux 9.Red Hat Product Security has rated this update as having a security impactof Moderate. A Common Vulnerability Scoring System (CVSS) base score, whichgives a detailed severity rating, is available for each vulnerability fromthe CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux AppStream (v. 9) - aarch64, noarch, ppc64le, s390x, x86_64


Bugs Fixed

2064319 - CVE-2022-23943 httpd: mod_sed: Read/write beyond bounds

2064320 - CVE-2022-22721 httpd: core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody

2064322 - CVE-2022-22719 httpd: mod_lua: Use of uninitialized value of in r:parsebody

2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv. Needs documentation.

2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending with core

2079939 - httpd rebase to 2.4.53

2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling

2095002 - CVE-2022-28614 httpd: Out-of-bounds read via ap_rwrite()

2095006 - CVE-2022-28615 httpd: Out-of-bounds read in ap_strcmp_match()

2095012 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody

2095015 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability

2095018 - CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets

2095020 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism

2095838 - mod_mime_magic: invalid type 0 in mconvert()


Related News

32.Lock Code Circular Esm H320
2 - 3 min read
Two critical security vulnerabilities were found in pgAdmin, the open-source administration tool for PostgreSQL . The vulnerabilities assigned
1.Penguin Landscape Esm H320
2 - 3 min read
The recent release of AlmaLinux 9.4 , closely aligned with Red Hat Enterprise Linux (RHEL) 9.4 , presents Linux admins and infosec professionals
11.Locks IsometricPattern Esm H320
2 - 3 min read
The upcoming release of Linux Mint 22 will introduce significant changes, particularly in handling XApp , GNOME applications, and the Software
2.Motherboard Esm H320
2 - 3 min read
German software engineer Lennart Poettering recently presented run0 , a new tool in systemd v256 that aims to address the security concerns
22.Lock ScreenEffect Esm H320
2 - 3 min read
Red Hat recently released its newest enterprise Linux distro, Red Hat Enterprise Linux (RHEL) 9.4 , which introduces several features designed to
8.Locks HexConnections CodeGlobe Esm H320
1 - 2 min read
The latest release of Debian , one of the oldest and most trusted distributions within the Linux ecosystem, redefines security, stability, and
20.Lock AbstractDigital Circular Esm H320
1 - 2 min read
The Ubuntu security team has recently discovered and addressed multiple vulnerabilities in the Apache HTTP Server. The vulnerabilities affected
1.Penguin Landscape Esm H320
1 - 2 min read
A critical vulnerability was discovered in the Linux kernel's netfilter subsystem, specifically within the nf_tables component, posing potential
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved