ELSA-2021-3856

ELSA-2021-3856 - httpd security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2021-10-14

Description

[2.4.6-97.0.1.1]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-97.1]
- Resolves: #2011729 - CVE-2021-40438 httpd: mod_proxy: SSRF via a crafted
request uri-path containing 'unix:'

Related CVEs

CVE-2021-40438

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-2.4.6-97.0.1.el7_9.1.aarch64.rpm	f1768b567880b93eb7bc243bb024bbc65065906d3e03bfd5973985cd80ccc532	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.1.el7_9.1.aarch64.rpm	f1768b567880b93eb7bc243bb024bbc65065906d3e03bfd5973985cd80ccc532	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-devel-2.4.6-97.0.1.el7_9.1.aarch64.rpm	1bd30490a2133bb2c1821e4d4ee948dcf9df04df95c144c2e24737a7834ad42a	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-97.0.1.el7_9.1.aarch64.rpm	1bd30490a2133bb2c1821e4d4ee948dcf9df04df95c144c2e24737a7834ad42a	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-manual-2.4.6-97.0.1.el7_9.1.noarch.rpm	8208f00938a2784243e34b61b9bc70ebdca8ee9f479ad3a63b6b499286982064	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-97.0.1.el7_9.1.noarch.rpm	8208f00938a2784243e34b61b9bc70ebdca8ee9f479ad3a63b6b499286982064	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-tools-2.4.6-97.0.1.el7_9.1.aarch64.rpm	a27f2a35c3348128a18f86b1ee29e965bed147a713bbc06ba5e3b191ea5a1646	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-97.0.1.el7_9.1.aarch64.rpm	a27f2a35c3348128a18f86b1ee29e965bed147a713bbc06ba5e3b191ea5a1646	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ldap-2.4.6-97.0.1.el7_9.1.aarch64.rpm	8be4247db2ab147c9920a753c5b4ebdf61ed576081e50fca0c9ea9f7e042c8fa	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-97.0.1.el7_9.1.aarch64.rpm	b106a7f88224f408c832415dcbfd923ad326b4fddd84ae0d226aab4bacaf8cca	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-97.0.1.el7_9.1.aarch64.rpm	6a922e382fac14a7b0ad1d53dc709a7c1bc3dc49126729c35092e11cb64d000b	ELSA-2024-7101	ol7_aarch64_latest
	mod_session-2.4.6-97.0.1.el7_9.1.aarch64.rpm	6a922e382fac14a7b0ad1d53dc709a7c1bc3dc49126729c35092e11cb64d000b	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ssl-2.4.6-97.0.1.el7_9.1.aarch64.rpm	7ef468b3314f9a614c44a222537f2bb269671fdff69a2ffc79258abaed1c7dd3	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-97.0.1.el7_9.1.aarch64.rpm	7ef468b3314f9a614c44a222537f2bb269671fdff69a2ffc79258abaed1c7dd3	ELSA-2024-7101	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_x86_64_optional_latest
	httpd-2.4.6-97.0.1.el7_9.1.src.rpm	2059632d998b3beba8d97808b8a8b55833d3c92cc543881ddbf910dc6cefdfb3	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-2.4.6-97.0.1.el7_9.1.x86_64.rpm	a7a76cdbe76415db59220f3ecf8bd213c25e8770af17a617e4e845aa2e3458d8	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.1.el7_9.1.x86_64.rpm	a7a76cdbe76415db59220f3ecf8bd213c25e8770af17a617e4e845aa2e3458d8	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-devel-2.4.6-97.0.1.el7_9.1.x86_64.rpm	04fe5a0ff9e58650ab836ead0213368cbd090efded3f774f2fbaeeeca2d36b51	ELSA-2024-7101	ol7_x86_64_latest
	httpd-devel-2.4.6-97.0.1.el7_9.1.x86_64.rpm	04fe5a0ff9e58650ab836ead0213368cbd090efded3f774f2fbaeeeca2d36b51	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-manual-2.4.6-97.0.1.el7_9.1.noarch.rpm	8208f00938a2784243e34b61b9bc70ebdca8ee9f479ad3a63b6b499286982064	ELSA-2024-7101	ol7_x86_64_latest
	httpd-manual-2.4.6-97.0.1.el7_9.1.noarch.rpm	8208f00938a2784243e34b61b9bc70ebdca8ee9f479ad3a63b6b499286982064	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-tools-2.4.6-97.0.1.el7_9.1.x86_64.rpm	60b1719a2114a20e2b388d27bc70d19edbf96308688871b68096edf689d29ba9	ELSA-2024-7101	ol7_x86_64_latest
	httpd-tools-2.4.6-97.0.1.el7_9.1.x86_64.rpm	60b1719a2114a20e2b388d27bc70d19edbf96308688871b68096edf689d29ba9	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ldap-2.4.6-97.0.1.el7_9.1.x86_64.rpm	0c798d108a22adb668311601b43bed90bb01685fb98296d774747c7eec08f47b	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_proxy_html-2.4.6-97.0.1.el7_9.1.x86_64.rpm	111069b98b51222f5fe421714d647d75ef3d072bb2c83c3cfcb118800ffce1a9	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_session-2.4.6-97.0.1.el7_9.1.x86_64.rpm	9cf56f48ff3a903201407258a2d9e4ce824e1223edfc3cf5778fdcfc9c78bbae	ELSA-2024-7101	ol7_x86_64_latest
	mod_session-2.4.6-97.0.1.el7_9.1.x86_64.rpm	9cf56f48ff3a903201407258a2d9e4ce824e1223edfc3cf5778fdcfc9c78bbae	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ssl-2.4.6-97.0.1.el7_9.1.x86_64.rpm	41dfb7b96938a088e9a6a6d3b7b572cd1d72e7444f9dae7bb8540539bde49343	ELSA-2024-7101	ol7_x86_64_latest
	mod_ssl-2.4.6-97.0.1.el7_9.1.x86_64.rpm	41dfb7b96938a088e9a6a6d3b7b572cd1d72e7444f9dae7bb8540539bde49343	ELSA-2024-7101	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team