ALAS-2021-1543: CVEs fixed (Amazon Linux)
ALAS-2021-1543 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2021-40438 CRITICAL 9.0 EXPLOITED MITIGATE MITIGATE Apache HTTP Server-Side Request Forgery (SSRF)
- CVE-2021-42013 CRITICAL 9.8 EXPLOITED DOWNGRADE MITIGATE Apache HTTP Server Path Traversal Vulnerability
- CVE-2021-41773 CRITICAL 9.8 EXPLOITED DOWNGRADE MITIGATE Apache HTTP Server Path Traversal Vulnerability
Applies to
- Amazon Linux 1