ELSA-2017-1721

ELSA-2017-1721 - httpd security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2017-07-11

Description

[2.2.15-60.0.1.4]
- replace index.html with Oracle's index page oracle_index.html
- update vstring in specfile

[2.2.15-60.4]
- Related: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
Whitespace Defects

[2.2.15-60.3]
- Resolves: #1463205 - CVE-2017-7668 httpd: ap_find_token() buffer overread

[2.2.15-60.2]
- Resolves: #1463354 - segfault in ap_proxy_set_scoreboard_lb

[2.2.15-60.1]
- Resolves: #1427675 - CVE-2016-8743 httpd: Apache HTTP Request Parsing
Whitespace Defects

Related CVEs

CVE-2016-8743

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	httpd-2.2.15-60.0.1.el6_9.4.src.rpm	b003d80084f3833db64a55b6a9b1ccbb	ELBA-2018-1891
	httpd-2.2.15-60.0.1.el6_9.4.i686.rpm	fb2c7dbd142054b1b67c338bef14980a	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.4.i686.rpm	777398825fdd84dd457cfcc8e0d08842	ELBA-2018-1891
	httpd-manual-2.2.15-60.0.1.el6_9.4.noarch.rpm	e4a4d652165ad5b91f5723358892acd9	ELBA-2018-1891
	httpd-tools-2.2.15-60.0.1.el6_9.4.i686.rpm	87faaa33ab8d2d7693a2d6f3b88ffb11	ELBA-2018-1891
	mod_ssl-2.2.15-60.0.1.el6_9.4.i686.rpm	8ae4d59cac8d51629af077c9dec37dcb	ELBA-2018-1891
Oracle Linux 6 (x86_64)	httpd-2.2.15-60.0.1.el6_9.4.src.rpm	b003d80084f3833db64a55b6a9b1ccbb	ELBA-2018-1891
	httpd-2.2.15-60.0.1.el6_9.4.x86_64.rpm	7b243af7cb39ac603e1fdd30724acab7	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.4.i686.rpm	777398825fdd84dd457cfcc8e0d08842	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.4.x86_64.rpm	65a9ffb5a95e44523af7392f022c3a13	ELBA-2018-1891
	httpd-manual-2.2.15-60.0.1.el6_9.4.noarch.rpm	e4a4d652165ad5b91f5723358892acd9	ELBA-2018-1891
	httpd-tools-2.2.15-60.0.1.el6_9.4.x86_64.rpm	f566e9d46b89518d011df777309ac2b0	ELBA-2018-1891
	mod_ssl-2.2.15-60.0.1.el6_9.4.x86_64.rpm	989cebc8519031395fe4db650f918f07	ELBA-2018-1891

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team