RHSA-2024:4726: CVEs fixed (Red Hat)
RHSA-2024:4726 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
- CVE-2024-38474 CRITICAL 9.8 UPGRADE MITIGATE Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute
Applies to
- RHEL 9 · fixed in httpd-2.4.57-11.el9_4