ELSA-2017-2478

ELSA-2017-2478 - httpd security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2017-08-15

Description

[2.2.15-60.0.1.5]
- replace index.html with Oracle's index page oracle_index.html
- update vstring in specfile

[2.2.15-60.5]
- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
in mod_auth_digest

Related CVEs

CVE-2017-3167

CVE-2017-3169

CVE-2017-7679

CVE-2017-9788

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	httpd-2.2.15-60.0.1.el6_9.5.src.rpm	f9f788a3167a18180b1d59d30654664e	ELBA-2018-1891
	httpd-2.2.15-60.0.1.el6_9.5.i686.rpm	43b0ea7b17bf7528ecf912596508fad5	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.5.i686.rpm	7a7c75d5f4973a741f45d0d53ba102cb	ELBA-2018-1891
	httpd-manual-2.2.15-60.0.1.el6_9.5.noarch.rpm	5c0128fc802bd6368850fdc7222eb4fb	ELBA-2018-1891
	httpd-tools-2.2.15-60.0.1.el6_9.5.i686.rpm	491f443004bfde95ee659459ec6d43fd	ELBA-2018-1891
	mod_ssl-2.2.15-60.0.1.el6_9.5.i686.rpm	a7ca7e035cb9b41ea2ea526111e7cc5e	ELBA-2018-1891
Oracle Linux 6 (x86_64)	httpd-2.2.15-60.0.1.el6_9.5.src.rpm	f9f788a3167a18180b1d59d30654664e	ELBA-2018-1891
	httpd-2.2.15-60.0.1.el6_9.5.x86_64.rpm	b845f21dab3681114028973957c7054b	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.5.i686.rpm	7a7c75d5f4973a741f45d0d53ba102cb	ELBA-2018-1891
	httpd-devel-2.2.15-60.0.1.el6_9.5.x86_64.rpm	29253a865b7cb82279c19dfa61f72ee3	ELBA-2018-1891
	httpd-manual-2.2.15-60.0.1.el6_9.5.noarch.rpm	5c0128fc802bd6368850fdc7222eb4fb	ELBA-2018-1891
	httpd-tools-2.2.15-60.0.1.el6_9.5.x86_64.rpm	9d26cf5479cf5487b2a8845db2d186b4	ELBA-2018-1891
	mod_ssl-2.2.15-60.0.1.el6_9.5.x86_64.rpm	6128bea705c9a45861d0ac4677589b0e	ELBA-2018-1891

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team