Is the Apache HTTP Proxy 2.4.48 vulnerable for CVE-2021-41773 and CVE-2021-41524

[Bob van der Woude 1]

Hello,

There are critical updates for Apache 2.4.49 and older for vulnerability CVE-2021-41773 and CVE-2021-41524

is the Eset Apachte HTTP proxy also vulnerable? and if so is there an update?
The https://support.eset.com/en/news8116-eset-protect-hotfix-version-81131-has-been-released  is installing v. 2.4.48

 

Edited October 7, 2021 by Bob van der Woude
title update

[Peter Randziak 1,186]

Hello @Bob van der Woude,

for both CVE-2021-41773 and CVE-2021-41524 the version 2.4.49 is listed as affected see https://httpd.apache.org/security/vulnerabilities_24.html

The version offered by ESET is now 2.4.48.1

Peter

[Bob van der Woude 1]

Thanks @Peter Randziak