RHSA-2024:4938: CVEs fixed (Red Hat)
RHSA-2024:4938 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
- CVE-2024-38474 CRITICAL 9.8 UPGRADE MITIGATE Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute
Applies to
- RHEL 7.7 Advanced Update Support · fixed in httpd-2.4.6-90.el7_7.4