ELSA-2020-1121

ELSA-2020-1121 - httpd security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-04-06

Description

[2.4.6-93.0.1]
- replace index.html with Oracles index page oracle_index.html

[2.4.6-93]
- Resolves: #1677496 - CVE-2018-17199 httpd: mod_session_cookie does not respect
expiry time

[2.4.6-92]
- htpasswd: add SHA-2 crypt() support (#1486889)

[2.4.6-91]
- Resolves: #1630886 - scriptlet can fail if hostname is not installed
- Resolves: #1565465 - CVE-2017-15710 httpd: Out of bound write in
mod_authnz_ldap when using too small Accept-Language values
- Resolves: #1568298 - CVE-2018-1301 httpd: Out of bounds access after
failure in reading the HTTP request
- Resolves: #1673457 - Apache child process crashes because ScriptAliasMatch
directive
- Resolves: #1633152 - mod_session missing apr-util-openssl
- Resolves: #1649470 - httpd response contains garbage in Content-Type header
- Resolves: #1724034 - Unexpected OCSP in proxy SSL connection

Related CVEs

CVE-2017-15710

CVE-2018-1301

CVE-2018-17199

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	httpd-2.4.6-93.0.1.el7.src.rpm	3a6874c0b62fc4867c96c97f89affc81	ELBA-2020-5033
	httpd-2.4.6-93.0.1.el7.aarch64.rpm	e305964c576d3aff8ac25ac04e1f7935	ELBA-2020-5033
	httpd-devel-2.4.6-93.0.1.el7.aarch64.rpm	a78d1fb2eb658ee1b38327e6f03f509b	ELBA-2020-5033
	httpd-manual-2.4.6-93.0.1.el7.noarch.rpm	8ff6663b355790e5b51b5f2aa3521352	ELBA-2020-5033
	httpd-tools-2.4.6-93.0.1.el7.aarch64.rpm	16d70a41c04ac1748a5a6c88697fa3b5	ELBA-2020-5033
	mod_ldap-2.4.6-93.0.1.el7.aarch64.rpm	bd72ae8fd46388b3b126333f61678956	ELBA-2020-5033
	mod_proxy_html-2.4.6-93.0.1.el7.aarch64.rpm	c43843acdce737485893923ea1dd7021	ELBA-2020-5033
	mod_session-2.4.6-93.0.1.el7.aarch64.rpm	2896c9e5eaddd8cfcfd3828073b9a215	ELBA-2020-5033
	mod_ssl-2.4.6-93.0.1.el7.aarch64.rpm	72e706ef391d6234d9842380d473c393	ELBA-2020-5033
Oracle Linux 7 (x86_64)	httpd-2.4.6-93.0.1.el7.src.rpm	3a6874c0b62fc4867c96c97f89affc81	ELBA-2020-5033
	httpd-2.4.6-93.0.1.el7.x86_64.rpm	a4be83f82fad0d7112935f370794eee2	ELBA-2020-5033
	httpd-devel-2.4.6-93.0.1.el7.x86_64.rpm	9e83509574ad1de5f40f6df5c7fe3520	ELBA-2020-5033
	httpd-manual-2.4.6-93.0.1.el7.noarch.rpm	8ff6663b355790e5b51b5f2aa3521352	ELBA-2020-5033
	httpd-tools-2.4.6-93.0.1.el7.x86_64.rpm	2ee774167456e7219f6e50b2c4bfa69e	ELBA-2020-5033
	mod_ldap-2.4.6-93.0.1.el7.x86_64.rpm	d8ab2205f3bb3dfab60aa00753b5683d	ELBA-2020-5033
	mod_proxy_html-2.4.6-93.0.1.el7.x86_64.rpm	f6fbe18692c462d50403da24d2fcff56	ELBA-2020-5033
	mod_session-2.4.6-93.0.1.el7.x86_64.rpm	03640b5c0a18214f84fa84f8ba6ddff7	ELBA-2020-5033
	mod_ssl-2.4.6-93.0.1.el7.x86_64.rpm	35573c64aa5e19307422063eb40313b7	ELBA-2020-5033

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team