ELSA-2015-1667

ELSA-2015-1667 - httpd security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2015-08-24

Description

[2.4.6-31.0.1.el7_1.1]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-31.1]
- core: fix chunk header parsing defect (CVE-2015-3183)
- core: replace of ap_some_auth_required with ap_some_authn_required
and ap_force_authn hook (CVE-2015-3185)

Related CVEs

CVE-2015-3183

CVE-2015-3185

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	httpd-2.4.6-31.0.1.el7_1.1.src.rpm	272dfc56921bea18850913835936eb59	ELBA-2020-5033
	httpd-2.4.6-31.0.1.el7_1.1.x86_64.rpm	ee96edfa68bbef6ebed2ad0c0aa2fc37	ELBA-2020-5033
	httpd-devel-2.4.6-31.0.1.el7_1.1.x86_64.rpm	049b2305970c540657bd4d55994de0f6	ELBA-2020-5033
	httpd-manual-2.4.6-31.0.1.el7_1.1.noarch.rpm	e8e5971d329bbf4af1887a775abe401d	ELBA-2020-5033
	httpd-tools-2.4.6-31.0.1.el7_1.1.x86_64.rpm	c4780171d1620a9d3249e8ba4edaa354	ELBA-2020-5033
	mod_ldap-2.4.6-31.0.1.el7_1.1.x86_64.rpm	1300ee2d12b2ce6802fe6e539ac66fd3	ELBA-2020-5033
	mod_proxy_html-2.4.6-31.0.1.el7_1.1.x86_64.rpm	6907dde2816d444d68b8e7152728a67e	ELBA-2020-5033
	mod_session-2.4.6-31.0.1.el7_1.1.x86_64.rpm	cc2f41b7917130257591a7f80f42d48a	ELBA-2020-5033
	mod_ssl-2.4.6-31.0.1.el7_1.1.x86_64.rpm	322af5175530ab253a46de8de23b1c6b	ELBA-2020-5033

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team