RHSA-2022:0303HighCVSS 9.8

Red Hat Security Advisory: httpd24-httpd security update

Published
January 27, 2022
Last Modified
November 9, 2026

🔗 CVE IDs covered (1)

CVE-2021-44790 →

📋 Description

CVE-2021-44790 — httpd: mod_lua: Possible buffer overflow when parsing multipart content

🎯 Affected products38

  • Red Hat Software Collections for RHEL Workstation(v. 7)
  • Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.src as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.src as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-debuginfo-0:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-debuginfo-0:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-debuginfo-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-debuginfo-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-devel-0:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-devel-0:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-devel-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-devel-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-manual-0:2.4.34-23.el7.1.noarch as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-manual-0:2.4.34-23.el7.1.noarch as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-httpd-tools-0:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-tools-0:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-tools-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-httpd-tools-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-mod_ldap-0:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_ldap-0:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_ldap-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_ldap-0:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • httpd24-mod_proxy_html-1:2.4.34-23.el7.1.ppc64le as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_proxy_html-1:2.4.34-23.el7.1.s390x as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_proxy_html-1:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL Workstation(v. 7)
  • httpd24-mod_proxy_html-1:2.4.34-23.el7.1.x86_64 as a component of Red Hat Software Collections for RHEL(v. 7)
  • +8 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 After installing the updated packages, the httpd daemon will be restarted automatically. Workaround: Disabling mod_lua and restarting httpd will mitigate this flaw. See https://access.redhat.com/articles/10649 for more information.

🔗 References (4)