RHSA-2024:4943: CVEs fixed (Red Hat)
RHSA-2024:4943 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2024-38475 CRITICAL 9.1 EXPLOITED UPGRADE MITIGATE Apache HTTP Server Improper Escaping of Output Vulnerability
- CVE-2024-38474 CRITICAL 9.8 UPGRADE MITIGATE Substitution encoding issue in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows attacker to execute
Applies to
- RHEL 7 Extended Lifecycle Support · fixed in httpd-2.4.6-99.el7_9.2