ELBA-2023-3333

ELBA-2023-3333 - httpd bug fix update

Type:	BUG
Impact:	NA
Release Date:	2023-05-29

Description

[2.4.6-99.1.0.1]
- mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
fixup last [CVE-2022-31813][Orabug: 34381850]
- mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-99.1]
- Resolves: #2190143 - mod_rewrite regression with CVE-2023-25690

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-2.4.6-99.0.1.el7_9.1.aarch64.rpm	8b906f8b891debf2dc8f345f9b56a34723a54ef26367c5a1a4a609e6ddf277f7	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-99.0.1.el7_9.1.aarch64.rpm	8b906f8b891debf2dc8f345f9b56a34723a54ef26367c5a1a4a609e6ddf277f7	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-devel-2.4.6-99.0.1.el7_9.1.aarch64.rpm	584e65929419df2f1643fa88d11b737c589ceee1f40d48e9eb55db5f136a57ea	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-99.0.1.el7_9.1.aarch64.rpm	584e65929419df2f1643fa88d11b737c589ceee1f40d48e9eb55db5f136a57ea	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-manual-2.4.6-99.0.1.el7_9.1.noarch.rpm	30641208796d93772300411ecd2acdb6c397729649d01fe36dc642818af65a00	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-99.0.1.el7_9.1.noarch.rpm	30641208796d93772300411ecd2acdb6c397729649d01fe36dc642818af65a00	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-tools-2.4.6-99.0.1.el7_9.1.aarch64.rpm	5a29e6213b2654820daf268d04516da37e2a1b9408add8166e516938d704aa79	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-99.0.1.el7_9.1.aarch64.rpm	5a29e6213b2654820daf268d04516da37e2a1b9408add8166e516938d704aa79	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ldap-2.4.6-99.0.1.el7_9.1.aarch64.rpm	0b8a6d242a70380b910fca160edef187ea01ac882fbfc4c2aeaf704069854f00	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-99.0.1.el7_9.1.aarch64.rpm	54c79e9d04374d66ce34ef0f47747ab3550f250453223029e9ec448b77e6bd6b	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-99.0.1.el7_9.1.aarch64.rpm	785d789638e20a5f69993df25d65f75a59ff9ef81c93f4adb2874a7aac2c622d	ELSA-2024-7101	ol7_aarch64_latest
	mod_session-2.4.6-99.0.1.el7_9.1.aarch64.rpm	785d789638e20a5f69993df25d65f75a59ff9ef81c93f4adb2874a7aac2c622d	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ssl-2.4.6-99.0.1.el7_9.1.aarch64.rpm	011dfad9dc680b049f09733929c3a385ba508c253b776806750b1f2d71ffea8b	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-99.0.1.el7_9.1.aarch64.rpm	011dfad9dc680b049f09733929c3a385ba508c253b776806750b1f2d71ffea8b	ELSA-2024-7101	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_x86_64_optional_latest
	httpd-2.4.6-99.0.1.el7_9.1.src.rpm	3b8683ffdf3091f3eeebe54bb0e7b2e89b8218152a601262c6870359295e90aa	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-2.4.6-99.0.1.el7_9.1.x86_64.rpm	b1164953da47287d40a17d69e1b28c8c32816157028ce8f0b57ac92a52c4a6b1	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-99.0.1.el7_9.1.x86_64.rpm	b1164953da47287d40a17d69e1b28c8c32816157028ce8f0b57ac92a52c4a6b1	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-devel-2.4.6-99.0.1.el7_9.1.x86_64.rpm	9abb95ecbcb641eb70e875a0a96699f80547550a2e8a5cdf9420603fc508fbc0	ELSA-2024-7101	ol7_x86_64_latest
	httpd-devel-2.4.6-99.0.1.el7_9.1.x86_64.rpm	9abb95ecbcb641eb70e875a0a96699f80547550a2e8a5cdf9420603fc508fbc0	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-manual-2.4.6-99.0.1.el7_9.1.noarch.rpm	30641208796d93772300411ecd2acdb6c397729649d01fe36dc642818af65a00	ELSA-2024-7101	ol7_x86_64_latest
	httpd-manual-2.4.6-99.0.1.el7_9.1.noarch.rpm	30641208796d93772300411ecd2acdb6c397729649d01fe36dc642818af65a00	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-tools-2.4.6-99.0.1.el7_9.1.x86_64.rpm	9a9ff53779a78cf2d733fb87c1dd9da84a1e3c9a9f6ed245f6ef6037d9288a3c	ELSA-2024-7101	ol7_x86_64_latest
	httpd-tools-2.4.6-99.0.1.el7_9.1.x86_64.rpm	9a9ff53779a78cf2d733fb87c1dd9da84a1e3c9a9f6ed245f6ef6037d9288a3c	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ldap-2.4.6-99.0.1.el7_9.1.x86_64.rpm	3d5ae1ba11aa7d9fd63f41bd582c0d06f929639373c4fa6e9f5011bf1a07478b	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_proxy_html-2.4.6-99.0.1.el7_9.1.x86_64.rpm	4834d617757d705283a2146c21fef45278e363ba6fde32c27259fbc45c0e0aee	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_session-2.4.6-99.0.1.el7_9.1.x86_64.rpm	e469b50f280a1295a82ffe67c8d5312bd568bad7566626d75ec4c7cd0b11f5ee	ELSA-2024-7101	ol7_x86_64_latest
	mod_session-2.4.6-99.0.1.el7_9.1.x86_64.rpm	e469b50f280a1295a82ffe67c8d5312bd568bad7566626d75ec4c7cd0b11f5ee	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ssl-2.4.6-99.0.1.el7_9.1.x86_64.rpm	c58b2d3e8f62f848725b2d270bc40aa8a26a240e86402bd3f5573f0d8f148f8f	ELSA-2024-7101	ol7_x86_64_latest
	mod_ssl-2.4.6-99.0.1.el7_9.1.x86_64.rpm	c58b2d3e8f62f848725b2d270bc40aa8a26a240e86402bd3f5573f0d8f148f8f	ELSA-2024-7101	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team