RHSA-2014:0922High
Red Hat Security Advisory: httpd24-httpd security update
🔗 CVE IDs covered (5)
📋 Description
CVE-2013-4352 — httpd: mod_cache NULL pointer dereference crash CVE-2014-0117 — httpd: mod_proxy denial of service CVE-2014-0118 — httpd: mod_deflate denial of service CVE-2014-0226 — httpd: mod_status heap-based buffer overflow CVE-2014-0231 — httpd: mod_cgid denial of service
🎯 Affected products55
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- httpd24-httpd-0:2.4.6-18.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- httpd24-httpd-0:2.4.6-18.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- httpd24-httpd-0:2.4.6-18.el6.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- httpd24-httpd-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- httpd24-httpd-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- httpd24-httpd-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- httpd24-httpd-0:2.4.6-21.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- httpd24-httpd-0:2.4.6-21.el7.src as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- httpd24-httpd-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- httpd24-httpd-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- httpd24-httpd-debuginfo-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- httpd24-httpd-debuginfo-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- httpd24-httpd-debuginfo-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- httpd24-httpd-debuginfo-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- httpd24-httpd-debuginfo-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- httpd24-httpd-devel-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- httpd24-httpd-devel-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- httpd24-httpd-devel-0:2.4.6-18.el6.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- httpd24-httpd-devel-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- httpd24-httpd-devel-0:2.4.6-21.el7.x86_64 as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- httpd24-httpd-manual-0:2.4.6-18.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6)
- httpd24-httpd-manual-0:2.4.6-18.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server EUS (v. 6.4)
- httpd24-httpd-manual-0:2.4.6-18.el6.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6)
- httpd24-httpd-manual-0:2.4.6-21.el7.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 7)
- httpd24-httpd-manual-0:2.4.6-21.el7.noarch as a component of Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 7)
- +25 more not shown
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2014:0922
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1120596
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1120599
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1120601
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1120603
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1120604
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0922.json