RHSA-2016:0061MediumCVSS 3.7

Red Hat Security Advisory: httpd and httpd22 security update

Published
January 21, 2016
Last Modified
November 7, 2026

🔗 CVE IDs covered (2)

CVE-2013-5704 →CVE-2015-3183 →

📋 Description

CVE-2013-5704 — httpd: bypass of mod_headers rules via chunked requests CVE-2015-3183 — httpd: HTTP request smuggling attack against chunked request parser

🎯 Affected products45

  • Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd-0:2.2.26-41.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-0:2.2.26-41.ep6.el5.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-0:2.2.26-41.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-0:2.2.26-41.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-0:2.2.26-41.ep6.el6.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-0:2.2.26-41.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-debuginfo-0:2.2.26-41.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-debuginfo-0:2.2.26-41.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-devel-0:2.2.26-41.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-devel-0:2.2.26-41.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-devel-0:2.2.26-41.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-devel-0:2.2.26-41.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-manual-0:2.2.26-41.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-manual-0:2.2.26-41.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-manual-0:2.2.26-41.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-manual-0:2.2.26-41.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-tools-0:2.2.26-41.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-tools-0:2.2.26-41.ep6.el5.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • httpd-tools-0:2.2.26-41.ep6.el6.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd-tools-0:2.2.26-41.ep6.el6.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 6 Server
  • httpd22-0:2.2.26-42.ep6.el7.src as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd22-0:2.2.26-42.ep6.el7.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd22-debuginfo-0:2.2.26-42.ep6.el7.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd22-devel-0:2.2.26-42.ep6.el7.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd22-manual-0:2.2.26-42.ep6.el7.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • httpd22-tools-0:2.2.26-42.ep6.el7.x86_64 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 7 Server
  • mod_cluster-native-0:1.2.9-6.Final_redhat_2.ep6.el5.i386 as a component of Red Hat JBoss Enterprise Web Server 2 for RHEL 5 Server
  • +15 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (5)