ELSA-2020-3958

ELSA-2020-3958 - httpd security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-10-06

Description

[2.4.6-95.0.1]
- replace index.html with Oracles index page oracle_index.html

[2.4.6-95]
- Resolves: #1823262 - CVE-2020-1934 httpd: mod_proxy_ftp use of uninitialized
value

[2.4.6-94]
- Resolves: #1565491 - CVE-2017-15715 httpd: bypass with a trailing
newline in the file name
- Resolves: #1747283 - CVE-2019-10098 httpd: mod_rewrite potential open redirect
- Resolves: #1724879 - httpd terminates all SSL connections using an abortive
shutdown
- Resolves: #1715981 - Backport of SessionExpiryUpdateInterval directive
- Resolves: #1565457 - CVE-2018-1303 httpd: Out of bounds read in
mod_cache_socache can allow a remote attacker to cause a denial of service
- Resolves: #1566531 - CVE-2018-1283 httpd: Improper handling of headers in
mod_session can allow a remote user to modify session data for CGI applications

Related CVEs

CVE-2018-1303

CVE-2020-1927

CVE-2017-15715

CVE-2018-1283

CVE-2019-10098

CVE-2020-1934

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	httpd-2.4.6-95.0.1.el7.src.rpm	2e6ae99106ddcda51bc14d2c16b6719e	ELBA-2020-5033
	httpd-2.4.6-95.0.1.el7.aarch64.rpm	277e9f27f345b526775ba2ce986e899d	ELBA-2020-5033
	httpd-devel-2.4.6-95.0.1.el7.aarch64.rpm	9a2ee8b114baabc89e3c0b6cfd87b8a2	ELBA-2020-5033
	httpd-manual-2.4.6-95.0.1.el7.noarch.rpm	97e9972a353308e5c093df886d286d4b	ELBA-2020-5033
	httpd-tools-2.4.6-95.0.1.el7.aarch64.rpm	118394df8c8bc175ed9795d3dc387df3	ELBA-2020-5033
	mod_ldap-2.4.6-95.0.1.el7.aarch64.rpm	51051487050011596e29d7892e2aed0f	ELBA-2020-5033
	mod_proxy_html-2.4.6-95.0.1.el7.aarch64.rpm	9ebb046f7cb3dd3c391f3cdabf009467	ELBA-2020-5033
	mod_session-2.4.6-95.0.1.el7.aarch64.rpm	756ab287429b5b34a94390979eb39ce4	ELBA-2020-5033
	mod_ssl-2.4.6-95.0.1.el7.aarch64.rpm	cb5f61f16fa5dbf24a4d4deeb5999cf7	ELBA-2020-5033
Oracle Linux 7 (x86_64)	httpd-2.4.6-95.0.1.el7.src.rpm	2e6ae99106ddcda51bc14d2c16b6719e	ELBA-2020-5033
	httpd-2.4.6-95.0.1.el7.x86_64.rpm	6d6145d1557572dc56497789203ffd94	ELBA-2020-5033
	httpd-devel-2.4.6-95.0.1.el7.x86_64.rpm	ea95c36824b2fc483681602fda689f88	ELBA-2020-5033
	httpd-manual-2.4.6-95.0.1.el7.noarch.rpm	97e9972a353308e5c093df886d286d4b	ELBA-2020-5033
	httpd-tools-2.4.6-95.0.1.el7.x86_64.rpm	7288980b8db3cc1d9c29d94d697ffc18	ELBA-2020-5033
	mod_ldap-2.4.6-95.0.1.el7.x86_64.rpm	dc6c9e493cb396c7ba319df14039a572	ELBA-2020-5033
	mod_proxy_html-2.4.6-95.0.1.el7.x86_64.rpm	6fe479eaf345816fa3d3c11398b9bd76	ELBA-2020-5033
	mod_session-2.4.6-95.0.1.el7.x86_64.rpm	eb678fdb1de00e09335b1a592bc8b479	ELBA-2020-5033
	mod_ssl-2.4.6-95.0.1.el7.x86_64.rpm	2afeb400893080150c8876ab2aea36fe	ELBA-2020-5033

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team