ELBA-2023-12091

ELBA-2023-12091 - httpd bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-01-30

Description

[2.4.6-98.0.3]
- mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
fixup last [CVE-2022-31813][Orabug: 34381850]
- mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-2.4.6-98.0.3.el7_9.6.aarch64.rpm	b9488528b3111bec671b7a69f22c992426acd55bfcb40f23c521d3666257b725	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-98.0.3.el7_9.6.aarch64.rpm	b9488528b3111bec671b7a69f22c992426acd55bfcb40f23c521d3666257b725	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-devel-2.4.6-98.0.3.el7_9.6.aarch64.rpm	d6d05bbfcee223cf5284ccf7e813a6975348273e3738049befbbd7765cae400a	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-98.0.3.el7_9.6.aarch64.rpm	d6d05bbfcee223cf5284ccf7e813a6975348273e3738049befbbd7765cae400a	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-manual-2.4.6-98.0.3.el7_9.6.noarch.rpm	e1ab1e7cc5d040ea4001d7830c6b1ca7e774856ec8a68cbb6fa5506524fe4ac7	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-98.0.3.el7_9.6.noarch.rpm	e1ab1e7cc5d040ea4001d7830c6b1ca7e774856ec8a68cbb6fa5506524fe4ac7	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-tools-2.4.6-98.0.3.el7_9.6.aarch64.rpm	f4f93b2470254219efb196c0643c7efa7774a0d13befb6d54b6531b177e704e0	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-98.0.3.el7_9.6.aarch64.rpm	f4f93b2470254219efb196c0643c7efa7774a0d13befb6d54b6531b177e704e0	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ldap-2.4.6-98.0.3.el7_9.6.aarch64.rpm	8743c09d0c62037b13ce9d9d712505e4be7e7965d9d662c46a945762fa138edd	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-98.0.3.el7_9.6.aarch64.rpm	055552e22265ca662108feebca792a5a7304843b4cd998858b18a1905bfe829d	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-98.0.3.el7_9.6.aarch64.rpm	d7c562aa9daae06ebefa93395dfe8bbee8759d7d1a0e10e2cb4c750f5979909e	ELSA-2024-7101	ol7_aarch64_latest
	mod_session-2.4.6-98.0.3.el7_9.6.aarch64.rpm	d7c562aa9daae06ebefa93395dfe8bbee8759d7d1a0e10e2cb4c750f5979909e	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ssl-2.4.6-98.0.3.el7_9.6.aarch64.rpm	1a6c763e3cbba22dfa071b06cfad860e169c921c2b381bf864807a31a2863c06	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-98.0.3.el7_9.6.aarch64.rpm	1a6c763e3cbba22dfa071b06cfad860e169c921c2b381bf864807a31a2863c06	ELSA-2024-7101	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_x86_64_optional_latest
	httpd-2.4.6-98.0.3.el7_9.6.src.rpm	b81be8a1762c257dd43645a2891eaf28182b9400b858b2189ba90dfe920b243f	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-2.4.6-98.0.3.el7_9.6.x86_64.rpm	5dbd448d556715c507302d3ba47816111fb5516019c05a6191eea60b638bb51f	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-98.0.3.el7_9.6.x86_64.rpm	5dbd448d556715c507302d3ba47816111fb5516019c05a6191eea60b638bb51f	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-devel-2.4.6-98.0.3.el7_9.6.x86_64.rpm	c9080049ba499add49ab117798a288ba974778a44634ddfb04e31c1aa6dbdcdf	ELSA-2024-7101	ol7_x86_64_latest
	httpd-devel-2.4.6-98.0.3.el7_9.6.x86_64.rpm	c9080049ba499add49ab117798a288ba974778a44634ddfb04e31c1aa6dbdcdf	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-manual-2.4.6-98.0.3.el7_9.6.noarch.rpm	e1ab1e7cc5d040ea4001d7830c6b1ca7e774856ec8a68cbb6fa5506524fe4ac7	ELSA-2024-7101	ol7_x86_64_latest
	httpd-manual-2.4.6-98.0.3.el7_9.6.noarch.rpm	e1ab1e7cc5d040ea4001d7830c6b1ca7e774856ec8a68cbb6fa5506524fe4ac7	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-tools-2.4.6-98.0.3.el7_9.6.x86_64.rpm	e0c794bdd03c03988d67d4dbba9f6d88658d3744d07daa50f09aa07ea5c54c5d	ELSA-2024-7101	ol7_x86_64_latest
	httpd-tools-2.4.6-98.0.3.el7_9.6.x86_64.rpm	e0c794bdd03c03988d67d4dbba9f6d88658d3744d07daa50f09aa07ea5c54c5d	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ldap-2.4.6-98.0.3.el7_9.6.x86_64.rpm	cfa1c44a70ff233ed8ba30ac5210b2396114539ba2bfb987046db1f5d1fe3acf	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_proxy_html-2.4.6-98.0.3.el7_9.6.x86_64.rpm	b644b5b6e271918c45db47907d9cabd74e749a4c47b61f651f0e053e109cc70d	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_session-2.4.6-98.0.3.el7_9.6.x86_64.rpm	fd216f7e521ab3acdabe8ae12f807303e3bf57e00eb4df40108a1101a685496e	ELSA-2024-7101	ol7_x86_64_latest
	mod_session-2.4.6-98.0.3.el7_9.6.x86_64.rpm	fd216f7e521ab3acdabe8ae12f807303e3bf57e00eb4df40108a1101a685496e	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ssl-2.4.6-98.0.3.el7_9.6.x86_64.rpm	fb8b5789ae8141a23aba2faad7733704397788889d7f10d1ac6281d9a0fa17aa	ELSA-2024-7101	ol7_x86_64_latest
	mod_ssl-2.4.6-98.0.3.el7_9.6.x86_64.rpm	fb8b5789ae8141a23aba2faad7733704397788889d7f10d1ac6281d9a0fa17aa	ELSA-2024-7101	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team