RLSA-2024:2278
Moderate: httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
- httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
What each source reports
OSV No score
Moderate: httpd security update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server.
Security Fix(es):
- httpd: mod_macro: out-of-bounds read vulnerability (CVE-2023-31122)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.
- Record
RLSA-2024:2278- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
httpdRocky Linux:9 |
before 0:2.4.57-8.el9 | 0:2.4.57-8.el9 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
RLSA-2024:2278 is a vulnerability with no CVSS score yet in httpd, published May 10, 2024. No source lists public exploit code. Fixed in httpd 0:2.4.57-8.el9.