RHSA-2013:1134Medium
Red Hat Security Advisory: httpd security update
🔗 CVE IDs covered (2)
📋 Description
CVE-2013-1862 — httpd: mod_rewrite allows terminal escape sequences to be written to the log file CVE-2013-1896 — httpd: mod_dav DoS (httpd child process crash) via a URI MERGE request with source URI not handled by mod_dav
🎯 Affected products1
- Red Hat JBoss Web Server 2.0
✅ Remediation
The References section of this erratum contains a download link (you must log in to download the update). Before applying the update, back up your existing Red Hat JBoss Web Server installation (including all applications and configuration files). The Apache HTTP Server must be restarted for this update to take effect.
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2013:1134
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver&downloadType=securityPatches&version=2.0.1
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=953729
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=983549
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_1134.json