ELBA-2017-2175

ELBA-2017-2175 - httpd bug fix update

Type:	BUG
Impact:	NA
Release Date:	2017-08-08

Description

[2.4.6-67.0.1]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-67]
- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
directives

[2.4.6-66]
- Related: #1332242 - Explicitly disallow the '#' character in allow,deny
directives

[2.4.6-65]
- Resolves: #1445885 - define _RH_HAS_HTTPPROTOCOLOPTIONS

[2.4.6-64]
- Resolves: #1442872 - apache user is not created during httpd installation
when apache group already exist with GID other than 48

[2.4.6-63]
- Related: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
httpd: various flaws

[2.4.6-62]
- Resolves: #1397241 - Backport Apache Bug 53098 - mod_proxy_ajp:
patch to set worker secret passed to tomcat

[2.4.6-61]
- Related: #1414258 - Crash during restart or at startup in mod_ssl,
in certinfo_free() function registered by ssl_stapling_ex_init()

[2.4.6-60]
- Resolves: #1414258 - Crash during restart or at startup in mod_ssl,
in certinfo_free() function registered by ssl_stapling_ex_init()

[2.4.6-59]
- Resolves: #1378946 - Backport of apache bug 55910: Continuation lines
are broken during buffer resize

[2.4.6-58]
- Resolves: #1364604 - Upstream Bug 56925 - ErrorDocument directive misbehaves
with mod_proxy_http and mod_proxy_ajp

[2.4.6-57]
- Resolves: #1324416 - Error 404 when switching language in HTML manual
more than once

[2.4.6-56]
- Resolves: #1353740 - Backport Apache PR58118 to fix mod_proxy_fcgi
spamming non-errors: AH01075: Error dispatching request to : (passing
brigade to output filters)

[2.4.6-55]
- Resolves: #1371876 - Apache httpd returns '200 OK' for a request
exceeding LimitRequestBody when enabling mod_ext_filter

[2.4.6-54]
- Resolves: #1372692 - Apache httpd does not log status code '413' in
access_log when exceeding LimitRequestBody

[2.4.6-53]
- Resolves: #1376835 - httpd with worker/event mpm segfaults after multiple
successive graceful reloads

[2.4.6-52]
- Resolves: #1332242 - Explicitly disallow the '#' character in allow,deny
directives

[2.4.6-51]
- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup
on backconn

[2.4.6-50]
- Resolves: #1348019 - mod_proxy: Fix a race condition that caused a failed
worker to be retried before the retry period is over

[2.4.6-49]
- Resolves: #1389535 - Segmentation fault in SSL_renegotiate

[2.4.6-48]
- Resolves: #1406184 - stapling_renew_response: abort early
(before apr_uri_parse) if ocspuri is empty

[2.4.6-47]
- prefork: fix delay completing graceful restart (#1327624)
- mod_ldap: fix authz regression, failing to rebind (#1415257)

[2.4.6-46]
- Resolves: #1412976 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743
httpd: various flaws

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-67.0.1.el7.src.rpm	95b746852a8984c643da8131de9c017e26e0c12c4d062a4e40c26b1cce1a077b	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-67.0.1.el7.src.rpm	95b746852a8984c643da8131de9c017e26e0c12c4d062a4e40c26b1cce1a077b	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-67.0.1.el7.aarch64.rpm	ea017324c1a2faf24b18257e3c97291fd8212f4b5021535550a47ce299e3e936	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-67.0.1.el7.aarch64.rpm	af83ecda6cf2f8309b11b50ad5c66aa37f8d373d492ee816bd83e21cc13fb420	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-67.0.1.el7.noarch.rpm	20cebeefb61fcae83d8c1b7406b8fed1147d274f3bb4f18954d8816af06eb140	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-67.0.1.el7.aarch64.rpm	7bb76795112c8597b90e09a555b99b0dcb14f7bb5b532ae8473794d36d8bb09c	ELSA-2024-7101	ol7_aarch64_latest
	mod_ldap-2.4.6-67.0.1.el7.aarch64.rpm	14dbdf4ac529ac75d65139249cc2d97c164ea6beb2a6ea712cbddceb31a1390a	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-67.0.1.el7.aarch64.rpm	62930bb1101f2643bae8224c72d8a960f90efeeb1ed97ca5be0cbfe8724e2d7d	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-67.0.1.el7.aarch64.rpm	6c14e0044622a79e7e98b363a2aa074a616d2b8553c9a1ecbbadeb7c4d4d39e3	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-67.0.1.el7.aarch64.rpm	3ac32d208bbf27ddc14079d8d0495aadafaecf9eb67dc05886257d3cc5a0b988	ELSA-2024-7101	ol7_aarch64_latest
Oracle Linux 7 (x86_64)	httpd-2.4.6-67.0.1.el7.src.rpm	95b746852a8984c643da8131de9c017e26e0c12c4d062a4e40c26b1cce1a077b	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-2.4.6-67.0.1.el7.src.rpm	95b746852a8984c643da8131de9c017e26e0c12c4d062a4e40c26b1cce1a077b	ELSA-2024-7101	ol7_x86_64_optional_archive
	httpd-2.4.6-67.0.1.el7.src.rpm	95b746852a8984c643da8131de9c017e26e0c12c4d062a4e40c26b1cce1a077b	ELSA-2024-7101	ol7_x86_64_u4_base
	httpd-2.4.6-67.0.1.el7.x86_64.rpm	d653c9bb86a0c880ca68be86bb1f422a842250fa4e7aa96bb21e5367062b73e6	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-2.4.6-67.0.1.el7.x86_64.rpm	d653c9bb86a0c880ca68be86bb1f422a842250fa4e7aa96bb21e5367062b73e6	ELSA-2024-7101	ol7_x86_64_u4_base
	httpd-devel-2.4.6-67.0.1.el7.x86_64.rpm	84565236eae9d1a2537d362e5553b6b038faabe0231f878a4b8b38ca11d737a9	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-devel-2.4.6-67.0.1.el7.x86_64.rpm	84565236eae9d1a2537d362e5553b6b038faabe0231f878a4b8b38ca11d737a9	ELSA-2024-7101	ol7_x86_64_u4_base
	httpd-manual-2.4.6-67.0.1.el7.noarch.rpm	20cebeefb61fcae83d8c1b7406b8fed1147d274f3bb4f18954d8816af06eb140	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-manual-2.4.6-67.0.1.el7.noarch.rpm	20cebeefb61fcae83d8c1b7406b8fed1147d274f3bb4f18954d8816af06eb140	ELSA-2024-7101	ol7_x86_64_u4_base
	httpd-tools-2.4.6-67.0.1.el7.x86_64.rpm	e81f40051313611e61fa670c07448229e1b1a0684f2c996f3203d81b0743f9c9	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-tools-2.4.6-67.0.1.el7.x86_64.rpm	e81f40051313611e61fa670c07448229e1b1a0684f2c996f3203d81b0743f9c9	ELSA-2024-7101	ol7_x86_64_u4_base
	mod_ldap-2.4.6-67.0.1.el7.x86_64.rpm	321c628c70f0622cccc40189572b1186ad6b5c14985b02958d26d457b583c2e5	ELSA-2024-7101	ol7_x86_64_optional_archive
	mod_proxy_html-2.4.6-67.0.1.el7.x86_64.rpm	3d9ed06c42177f8ed78d0eb56f1b3bbf5f6447b2722c084842f5e409a811c230	ELSA-2024-7101	ol7_x86_64_optional_archive
	mod_session-2.4.6-67.0.1.el7.x86_64.rpm	7086e75cb2f4d7075fcd6bcf34626731be2f459652da1c627898ad345a6fb8e4	ELSA-2024-7101	ol7_x86_64_latest_archive
	mod_session-2.4.6-67.0.1.el7.x86_64.rpm	7086e75cb2f4d7075fcd6bcf34626731be2f459652da1c627898ad345a6fb8e4	ELSA-2024-7101	ol7_x86_64_u4_base
	mod_ssl-2.4.6-67.0.1.el7.x86_64.rpm	cfb7ca03a6a605097836b91c0c4458f81e7cfe59d553203ced2834a05f390d99	ELSA-2024-7101	ol7_x86_64_latest_archive
	mod_ssl-2.4.6-67.0.1.el7.x86_64.rpm	cfb7ca03a6a605097836b91c0c4458f81e7cfe59d553203ced2834a05f390d99	ELSA-2024-7101	ol7_x86_64_u4_base

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team