RHSA-2024:4863: CVEs fixed (Red Hat)
RHSA-2024:4863 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
- CVE-2024-38474 CRITICAL 9.8 UPGRADE MITIGATE Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute
Applies to
- RHEL 9.0 Update Services for SAP Solutions · fixed in httpd-2.4.51-7.el9_0.7