ELSA-2015-1667

ELSA-2015-1667 - httpd security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2015-08-24

Description

[2.4.6-31.0.1.el7_1.1]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-31.1]
- core: fix chunk header parsing defect (CVE-2015-3183)
- core: replace of ap_some_auth_required with ap_some_authn_required
and ap_force_authn hook (CVE-2015-3185)

Related CVEs

CVE-2015-3185

CVE-2015-3183

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	httpd-2.4.6-31.0.1.el7_1.1.src.rpm	d7d35293e9e217533b436f64448bcf9ab2e6f4c08f7cbadaac9c6ae2d4bf362b	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-2.4.6-31.0.1.el7_1.1.src.rpm	d7d35293e9e217533b436f64448bcf9ab2e6f4c08f7cbadaac9c6ae2d4bf362b	ELSA-2024-7101	ol7_x86_64_optional_archive
	httpd-2.4.6-31.0.1.el7_1.1.src.rpm	d7d35293e9e217533b436f64448bcf9ab2e6f4c08f7cbadaac9c6ae2d4bf362b	ELSA-2024-7101	ol7_x86_64_u1_patch
	httpd-2.4.6-31.0.1.el7_1.1.x86_64.rpm	e2dcd7922e42d8c8b7cffa8e1b9d086e17341b5feac8343277c50662b5d0705b	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-2.4.6-31.0.1.el7_1.1.x86_64.rpm	e2dcd7922e42d8c8b7cffa8e1b9d086e17341b5feac8343277c50662b5d0705b	ELSA-2024-7101	ol7_x86_64_u1_patch
	httpd-devel-2.4.6-31.0.1.el7_1.1.x86_64.rpm	0bee604bf1fb6d6174ee710aeb00ed3cb61afa74f88895c2a483495c61b5902c	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-devel-2.4.6-31.0.1.el7_1.1.x86_64.rpm	0bee604bf1fb6d6174ee710aeb00ed3cb61afa74f88895c2a483495c61b5902c	ELSA-2024-7101	ol7_x86_64_u1_patch
	httpd-manual-2.4.6-31.0.1.el7_1.1.noarch.rpm	3298451095850d2114d5cddc0e479f38bb3fe55db4e1a5dc62130160456f0aac	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-manual-2.4.6-31.0.1.el7_1.1.noarch.rpm	3298451095850d2114d5cddc0e479f38bb3fe55db4e1a5dc62130160456f0aac	ELSA-2024-7101	ol7_x86_64_u1_patch
	httpd-tools-2.4.6-31.0.1.el7_1.1.x86_64.rpm	55dbcfb3ef965665d98b25718204c731c1d1698d780c9063f776d4df5538aea3	ELSA-2024-7101	ol7_x86_64_latest_archive
	httpd-tools-2.4.6-31.0.1.el7_1.1.x86_64.rpm	55dbcfb3ef965665d98b25718204c731c1d1698d780c9063f776d4df5538aea3	ELSA-2024-7101	ol7_x86_64_u1_patch
	mod_ldap-2.4.6-31.0.1.el7_1.1.x86_64.rpm	019acc21aba405012f92859240620b049dfe67699e025f8269234efc34a04d42	ELSA-2024-7101	ol7_x86_64_optional_archive
	mod_proxy_html-2.4.6-31.0.1.el7_1.1.x86_64.rpm	555a8997eda3e7253bbe8cbcd7cd43aca3871fc10878a3644adf22c5d5c036a3	ELSA-2024-7101	ol7_x86_64_optional_archive
	mod_session-2.4.6-31.0.1.el7_1.1.x86_64.rpm	a99d1f3705d71da72593e40dc3bb964951968d36006eb9c11a6408506df7bb08	ELSA-2024-7101	ol7_x86_64_optional_archive
	mod_ssl-2.4.6-31.0.1.el7_1.1.x86_64.rpm	47b91f51cbf33f3bc33850ac3a0ef1f18830d01d93d00d1de8af39c026f5d11e	ELSA-2024-7101	ol7_x86_64_latest_archive
	mod_ssl-2.4.6-31.0.1.el7_1.1.x86_64.rpm	47b91f51cbf33f3bc33850ac3a0ef1f18830d01d93d00d1de8af39c026f5d11e	ELSA-2024-7101	ol7_x86_64_u1_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team