ELBA-2023-3183

ELBA-2023-3183 - httpd:2.4 bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-05-25

Description

httpd
[2.4.37-56.0.1.6]
- Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
- Replace index.html with Oracle's index page oracle_index.html

mod_http2
[1.15.7-8.3]
- Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
with mod_rewrite and mod_proxy

mod_md

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	httpd-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.src.rpm	17c894e90415a94aa93d5ba8e0acc6f410ce833aba8e4523da61cec71be7f217	-	ol8_aarch64_appstream
	mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.src.rpm	3d6f0bb06f0068e25a37e18246c17d242ae7ed8a1ed84722caf3f13cd19d6834	-	ol8_aarch64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.src.rpm	77cb415f475a17a3208416ca7974c44f69ff0f2e2b6f5efcadb167d625b8f69b	-	ol8_aarch64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.src.rpm	77cb415f475a17a3208416ca7974c44f69ff0f2e2b6f5efcadb167d625b8f69b	-	ol8_aarch64_appstream_developer
	httpd-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	932607b7f41c7d914f9db54fadfc26a55fffd8e82fe7ef1d0d7fa920b6f77919	-	ol8_aarch64_appstream
	httpd-devel-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	ad590b6ebd20857393952e3a0180d0264613238a0395257494bc28989590faec	-	ol8_aarch64_appstream
	httpd-filesystem-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.noarch.rpm	be37a4199ba463838b1fc636dbe95ff2e57b6c7efbd4d9619ed953ed20ed2311	-	ol8_aarch64_appstream
	httpd-manual-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.noarch.rpm	d9a99f5af717312d03878f416d93b752bdb93faff0d8f99a6ff513d9a8f19981	-	ol8_aarch64_appstream
	httpd-tools-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	4e27995b3c610afffab547580c54575501f1e4be1bbe171ff88f7fc1ee1c7ced	-	ol8_aarch64_appstream
	mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.aarch64.rpm	039a962c99c66ae0f38cb9db0167e282ebd6399b947bf295eba0a066a2d6e6e5	-	ol8_aarch64_appstream
	mod_ldap-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	c2438631e75d3e352a93a2ad0e173181e5e962dba57efaad0f92b52d3d695f27	-	ol8_aarch64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.aarch64.rpm	97c8600bacc26dbeba30ce5cf83654348b37390c4c585336a03ea5d6c6417484	-	ol8_aarch64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.aarch64.rpm	97c8600bacc26dbeba30ce5cf83654348b37390c4c585336a03ea5d6c6417484	-	ol8_aarch64_appstream_developer
	mod_proxy_html-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	5f9f23538e2bdcb45b6b6f6be9339ba575be7144e1a38405c314033dd0f82775	-	ol8_aarch64_appstream
	mod_session-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	82a6b2400a82aad6103c63c8aa1ed24c20c610c9b048e2e33c0a8fa652e732d5	-	ol8_aarch64_appstream
	mod_ssl-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.aarch64.rpm	4827d5d68a1b802c8fcbeb4b27f25b689b7629a03118d0bf3ba18abbac4ca8ab	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	httpd-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.src.rpm	17c894e90415a94aa93d5ba8e0acc6f410ce833aba8e4523da61cec71be7f217	-	ol8_x86_64_appstream
	mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.src.rpm	3d6f0bb06f0068e25a37e18246c17d242ae7ed8a1ed84722caf3f13cd19d6834	-	ol8_x86_64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.src.rpm	77cb415f475a17a3208416ca7974c44f69ff0f2e2b6f5efcadb167d625b8f69b	-	ol8_x86_64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.src.rpm	77cb415f475a17a3208416ca7974c44f69ff0f2e2b6f5efcadb167d625b8f69b	-	ol8_x86_64_appstream_developer
	httpd-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	ed7cb09dc2b9f5fce67915d018292ae384e5e2eef208b6c41e8a04c294836add	-	ol8_x86_64_appstream
	httpd-devel-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	a2c023923074eb46cd19ead382a057219a4f91b29cbf5778bfc9a3c9e2184850	-	ol8_x86_64_appstream
	httpd-filesystem-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.noarch.rpm	be37a4199ba463838b1fc636dbe95ff2e57b6c7efbd4d9619ed953ed20ed2311	-	ol8_x86_64_appstream
	httpd-manual-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.noarch.rpm	d9a99f5af717312d03878f416d93b752bdb93faff0d8f99a6ff513d9a8f19981	-	ol8_x86_64_appstream
	httpd-tools-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	c055f8a91fa140b69d3fdd4300b85d391d36647f5ae5c6a784cf51894e5e0b3e	-	ol8_x86_64_appstream
	mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.x86_64.rpm	43e2f09c9ede0c43a792195c2161900a2c15d4eb639661cd8bdf29fdd9a48c07	-	ol8_x86_64_appstream
	mod_ldap-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	b3918caaf0b1721b86bb772eef2cdaaa6f39edf0ede4988a1245101ed05b95a4	-	ol8_x86_64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.x86_64.rpm	b82d8f3ba74d9b384ac1f3557beac8bdc03cdcce1f34b6d3f87251acd182b9fb	-	ol8_x86_64_appstream
	mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.x86_64.rpm	b82d8f3ba74d9b384ac1f3557beac8bdc03cdcce1f34b6d3f87251acd182b9fb	-	ol8_x86_64_appstream_developer
	mod_proxy_html-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	d2c4f529ef3605489d118625c3f8ae0f1855c8a2d5cc5e76d909024df17b9616	-	ol8_x86_64_appstream
	mod_session-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	90de0d373e1ea9c847e77bd0d4e301d984c83b29938a938300c56b24009205a4	-	ol8_x86_64_appstream
	mod_ssl-2.4.37-56.0.1.module+el8.8.0+21057+13668aee.6.x86_64.rpm	db5ee7d0bc186673ea813e77984d3bd0de0dc5480eaa0b457dca192d817cfd09	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team