ALAS2-2021-1716: CVEs fixed (Amazon Linux)

ALAS2-2021-1716 fixes 3 tracked CVEs. Affected systems and fixed versions.

• CVE-2021-40438 CRITICAL 9.0 EXPLOITED MITIGATE MITIGATE Apache HTTP Server-Side Request Forgery (SSRF)
• CVE-2021-42013 CRITICAL 9.8 EXPLOITED DOWNGRADE MITIGATE Apache HTTP Server Path Traversal Vulnerability
• CVE-2021-41773 CRITICAL 9.8 EXPLOITED DOWNGRADE MITIGATE Apache HTTP Server Path Traversal Vulnerability

Applies to

• Amazon Linux 2

← Back to latest CVEs