ELSA-2022-1045

ELSA-2022-1045 - httpd security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-03-24

Description

[2.4.6-97.0.5.5]
- mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-97.5]
- Resolves: #2065243 - CVE-2022-22720 httpd: HTTP request smuggling
vulnerability in Apache HTTP Server 2.4.52 and earlier

Related CVEs

CVE-2022-22720

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-2.4.6-97.0.5.el7_9.5.aarch64.rpm	aa1e74e21d21fdada88b249640dd671c223560018f42ce330a65311ccfbc308a	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.5.el7_9.5.aarch64.rpm	aa1e74e21d21fdada88b249640dd671c223560018f42ce330a65311ccfbc308a	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-devel-2.4.6-97.0.5.el7_9.5.aarch64.rpm	54536ecdbefc8504df35624084de323aab9d95d2ce430be484ceb95447e66467	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-97.0.5.el7_9.5.aarch64.rpm	54536ecdbefc8504df35624084de323aab9d95d2ce430be484ceb95447e66467	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-manual-2.4.6-97.0.5.el7_9.5.noarch.rpm	122105277cfaaba6f7a10ad633e56102a11068538cb49480bd35c548cf2716f5	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-97.0.5.el7_9.5.noarch.rpm	122105277cfaaba6f7a10ad633e56102a11068538cb49480bd35c548cf2716f5	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-tools-2.4.6-97.0.5.el7_9.5.aarch64.rpm	a1c71144df47908cd230795dc3c1d2d5d019218952575204696dbe8af2c13269	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-97.0.5.el7_9.5.aarch64.rpm	a1c71144df47908cd230795dc3c1d2d5d019218952575204696dbe8af2c13269	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ldap-2.4.6-97.0.5.el7_9.5.aarch64.rpm	cda9a4233ab67a554e05748429c99a23986d9773d40172e3c64f533375dadea0	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-97.0.5.el7_9.5.aarch64.rpm	2379acbac693b654b220553f7b79767705eca365b6ae74488883e533f7ec4a3b	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-97.0.5.el7_9.5.aarch64.rpm	53f5e91659e3b9576db1448b561f1d24291ef93d820bf26d4f8446562f2967bc	ELSA-2024-7101	ol7_aarch64_latest
	mod_session-2.4.6-97.0.5.el7_9.5.aarch64.rpm	53f5e91659e3b9576db1448b561f1d24291ef93d820bf26d4f8446562f2967bc	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ssl-2.4.6-97.0.5.el7_9.5.aarch64.rpm	9b99d41c3536ee3df330d16e8b0b1b955f4430ee0a0926ed89f7bb779a5c0a93	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-97.0.5.el7_9.5.aarch64.rpm	9b99d41c3536ee3df330d16e8b0b1b955f4430ee0a0926ed89f7bb779a5c0a93	ELSA-2024-7101	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_x86_64_optional_latest
	httpd-2.4.6-97.0.5.el7_9.5.src.rpm	db2c34d1397fec5f6f6449cd60e4d7a797d5d71ff597ae0ea948913b7e8fb874	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-2.4.6-97.0.5.el7_9.5.x86_64.rpm	a081a377f8379bec8a7e8f49c52f36d07191e10ac327edc0cd5f074cdd74521f	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.5.el7_9.5.x86_64.rpm	a081a377f8379bec8a7e8f49c52f36d07191e10ac327edc0cd5f074cdd74521f	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-devel-2.4.6-97.0.5.el7_9.5.x86_64.rpm	ba5c87323f3c73af922be2528c4e68224bda95843fd8ef046d73e992518c2fc5	ELSA-2024-7101	ol7_x86_64_latest
	httpd-devel-2.4.6-97.0.5.el7_9.5.x86_64.rpm	ba5c87323f3c73af922be2528c4e68224bda95843fd8ef046d73e992518c2fc5	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-manual-2.4.6-97.0.5.el7_9.5.noarch.rpm	122105277cfaaba6f7a10ad633e56102a11068538cb49480bd35c548cf2716f5	ELSA-2024-7101	ol7_x86_64_latest
	httpd-manual-2.4.6-97.0.5.el7_9.5.noarch.rpm	122105277cfaaba6f7a10ad633e56102a11068538cb49480bd35c548cf2716f5	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-tools-2.4.6-97.0.5.el7_9.5.x86_64.rpm	cd015a37ca745e5ca9b3ecd31faabc06c7cb03dd7738d0a115578c92df57d6b7	ELSA-2024-7101	ol7_x86_64_latest
	httpd-tools-2.4.6-97.0.5.el7_9.5.x86_64.rpm	cd015a37ca745e5ca9b3ecd31faabc06c7cb03dd7738d0a115578c92df57d6b7	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ldap-2.4.6-97.0.5.el7_9.5.x86_64.rpm	8e2b65ad09b50fe1540e337eb24194c7eca287bfd990fef4832466e88c8da95d	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_proxy_html-2.4.6-97.0.5.el7_9.5.x86_64.rpm	da70e44a7ce404e5093e08409ed82ea63755840715512af415517bc2d8c669fd	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_session-2.4.6-97.0.5.el7_9.5.x86_64.rpm	aa42b12933403a753d1930d8c6b16e8cfb555e235eae5c1acd35fb061ab3bfc9	ELSA-2024-7101	ol7_x86_64_latest
	mod_session-2.4.6-97.0.5.el7_9.5.x86_64.rpm	aa42b12933403a753d1930d8c6b16e8cfb555e235eae5c1acd35fb061ab3bfc9	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ssl-2.4.6-97.0.5.el7_9.5.x86_64.rpm	81c4e3785dd534524b3c46f228697591dc74145b2c2e1f5d58c7c7d3a5136a8d	ELSA-2024-7101	ol7_x86_64_latest
	mod_ssl-2.4.6-97.0.5.el7_9.5.x86_64.rpm	81c4e3785dd534524b3c46f228697591dc74145b2c2e1f5d58c7c7d3a5136a8d	ELSA-2024-7101	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team