HCE1-SA-2023-0023 Critical HCE 1.1 Security Fix(es): Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in ap_strcmp_match() when provided with an extremely large input buffer. While no code distributed with the server can be coerced into such a call, third-party modules or lua scripts that use ap_strcmp_match() may hypothetically be affected. (CVE-2022-28615) Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions. (CVE-2022-26377) HCE 1.1 httpd-2.4.6-97.hce1c.8.x86_64.rpm httpd-devel-2.4.6-97.hce1c.8.x86_64.rpm httpd-manual-2.4.6-97.hce1c.8.noarch.rpm httpd-tools-2.4.6-97.hce1c.8.x86_64.rpm mod_session-2.4.6-97.hce1c.8.x86_64.rpm mod_ssl-2.4.6-97.hce1c.8.x86_64.rpm