RHSA-2021:3746

See a problem?
Please try reporting it to the source first.

Source

https://access.redhat.com/errata/RHSA-2021:3746

Import Source

https://security.access.redhat.com/data/osv/RHSA-2021:3746.json

JSON Data

https://api.osv.dev/v1/vulns/RHSA-2021:3746

Related

CVE-2021-40438

Published

2024-09-13T17:28:39Z

Modified

2024-09-13T17:28:39Z

Severity

9.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP9 security update

Details

References

Affected packages

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_cluster-native

Package

Name: jbcs-httpd24-mod_cluster-native
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.16-7.Final_redhat_2.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_cluster-native-debuginfo

Package

Name: jbcs-httpd24-mod_cluster-native-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.16-7.Final_redhat_2.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.7-19.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.7-19.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-debuginfo

Package

Name: jbcs-httpd24-mod_jk-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_jk-manual

Package

Name: jbcs-httpd24-mod_jk-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.0.8-38.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.0.8-38.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.2-65.GA.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.2-65.GA.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el7 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.jbcs.el7

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd

Package

Name: jbcs-httpd24-httpd
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-debuginfo

Package

Name: jbcs-httpd24-httpd-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-devel

Package

Name: jbcs-httpd24-httpd-devel
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-manual

Package

Name: jbcs-httpd24-httpd-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-selinux

Package

Name: jbcs-httpd24-httpd-selinux
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-selinux

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools

Package

Name: jbcs-httpd24-httpd-tools
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-httpd-tools-debuginfo

Package

Name: jbcs-httpd24-httpd-tools-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-httpd-tools-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_cluster-native

Package

Name: jbcs-httpd24-mod_cluster-native
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.16-7.Final_redhat_2.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_cluster-native-debuginfo

Package

Name: jbcs-httpd24-mod_cluster-native-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.16-7.Final_redhat_2.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2

Package

Name: jbcs-httpd24-mod_http2
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.7-19.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_http2-debuginfo

Package

Name: jbcs-httpd24-mod_http2-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.15.7-19.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk

Package

Name: jbcs-httpd24-mod_jk
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24

Package

Name: jbcs-httpd24-mod_jk-ap24
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-ap24-debuginfo

Package

Name: jbcs-httpd24-mod_jk-ap24-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_jk-manual

Package

Name: jbcs-httpd24-mod_jk-manual
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.2.48-18.redhat_1.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap

Package

Name: jbcs-httpd24-mod_ldap
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ldap-debuginfo

Package

Name: jbcs-httpd24-mod_ldap-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ldap-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md

Package

Name: jbcs-httpd24-mod_md
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.0.8-38.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_md-debuginfo

Package

Name: jbcs-httpd24-mod_md-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.0.8-38.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html

Package

Name: jbcs-httpd24-mod_proxy_html
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_proxy_html-debuginfo

Package

Name: jbcs-httpd24-mod_proxy_html-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security

Package

Name: jbcs-httpd24-mod_security
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.2-65.GA.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_security-debuginfo

Package

Name: jbcs-httpd24-mod_security-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.9.2-65.GA.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session

Package

Name: jbcs-httpd24-mod_session
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_session-debuginfo

Package

Name: jbcs-httpd24-mod_session-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_session-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl

Package

Name: jbcs-httpd24-mod_ssl
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.el8jbcs

Red Hat:jboss_core_services:1::el8 / jbcs-httpd24-mod_ssl-debuginfo

Package

Name: jbcs-httpd24-mod_ssl-debuginfo
Purl: pkg:rpm/redhat/jbcs-httpd24-mod_ssl-debuginfo

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:2.4.37-76.el8jbcs