ELSA-2022-9675

ELSA-2022-9675 - httpd security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2022-08-04

Description

[2.4.6-97.0.7.5]
- mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
fixup last [CVE-2022-31813][Orabug: 34381850]

Related CVEs

CVE-2022-31813

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (aarch64)	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_aarch64_optional_latest
	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-2.4.6-97.0.7.el7_9.5.aarch64.rpm	d8d9bf17ac812d5226b2f455f59dc3c33bd1237cc802027dc7c0480b58be910d	ELSA-2024-7101	ol7_aarch64_latest
	httpd-2.4.6-97.0.7.el7_9.5.aarch64.rpm	d8d9bf17ac812d5226b2f455f59dc3c33bd1237cc802027dc7c0480b58be910d	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-devel-2.4.6-97.0.7.el7_9.5.aarch64.rpm	deb4c378b8a0e8ac06b6141c14f130ed9841265786842e4dc568ff9d74b63755	ELSA-2024-7101	ol7_aarch64_latest
	httpd-devel-2.4.6-97.0.7.el7_9.5.aarch64.rpm	deb4c378b8a0e8ac06b6141c14f130ed9841265786842e4dc568ff9d74b63755	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-manual-2.4.6-97.0.7.el7_9.5.noarch.rpm	014494abac76c9a4e253227e5c791f7994d1008ac01d9fc8c927f3640e39f03b	ELSA-2024-7101	ol7_aarch64_latest
	httpd-manual-2.4.6-97.0.7.el7_9.5.noarch.rpm	014494abac76c9a4e253227e5c791f7994d1008ac01d9fc8c927f3640e39f03b	ELSA-2024-7101	ol7_aarch64_u9_patch
	httpd-tools-2.4.6-97.0.7.el7_9.5.aarch64.rpm	8a0ba59b5acc8cf885561accdcb4e295be79e9a2539ff2dd73e81443d1312cd3	ELSA-2024-7101	ol7_aarch64_latest
	httpd-tools-2.4.6-97.0.7.el7_9.5.aarch64.rpm	8a0ba59b5acc8cf885561accdcb4e295be79e9a2539ff2dd73e81443d1312cd3	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ldap-2.4.6-97.0.7.el7_9.5.aarch64.rpm	931c29223cf73d6554fb61e5fee3ff4529a9ca81777bb20f44f54fa0be057393	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_proxy_html-2.4.6-97.0.7.el7_9.5.aarch64.rpm	10f2815662a957c65919b16aaf3e4ed2095e3604eff642eda1e418086a078a34	ELSA-2024-7101	ol7_aarch64_optional_latest
	mod_session-2.4.6-97.0.7.el7_9.5.aarch64.rpm	cdf8db8be7fbc243dccf9bafeaed16866defe375a838100e86abd3caf806dbbd	ELSA-2024-7101	ol7_aarch64_latest
	mod_session-2.4.6-97.0.7.el7_9.5.aarch64.rpm	cdf8db8be7fbc243dccf9bafeaed16866defe375a838100e86abd3caf806dbbd	ELSA-2024-7101	ol7_aarch64_u9_patch
	mod_ssl-2.4.6-97.0.7.el7_9.5.aarch64.rpm	bb17b712c7959e53ff66c231a112e4a6ed53ea8b1511e34ff454f5d40973d25c	ELSA-2024-7101	ol7_aarch64_latest
	mod_ssl-2.4.6-97.0.7.el7_9.5.aarch64.rpm	bb17b712c7959e53ff66c231a112e4a6ed53ea8b1511e34ff454f5d40973d25c	ELSA-2024-7101	ol7_aarch64_u9_patch
Oracle Linux 7 (x86_64)	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_x86_64_optional_latest
	httpd-2.4.6-97.0.7.el7_9.5.src.rpm	193daefc1cb251a274ac3fc47d9df842ab9874bc6763e1b5c253bb3b6f1a2ef0	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-2.4.6-97.0.7.el7_9.5.x86_64.rpm	072d33857fc10062f843680f676b4c8c448b6e03335aa6b6267fa37fdac4985f	ELSA-2024-7101	ol7_x86_64_latest
	httpd-2.4.6-97.0.7.el7_9.5.x86_64.rpm	072d33857fc10062f843680f676b4c8c448b6e03335aa6b6267fa37fdac4985f	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-devel-2.4.6-97.0.7.el7_9.5.x86_64.rpm	f8bd051aacf8bbccff38342727222882a0cacae3bf38c82af0a9a5a567c6b405	ELSA-2024-7101	ol7_x86_64_latest
	httpd-devel-2.4.6-97.0.7.el7_9.5.x86_64.rpm	f8bd051aacf8bbccff38342727222882a0cacae3bf38c82af0a9a5a567c6b405	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-manual-2.4.6-97.0.7.el7_9.5.noarch.rpm	014494abac76c9a4e253227e5c791f7994d1008ac01d9fc8c927f3640e39f03b	ELSA-2024-7101	ol7_x86_64_latest
	httpd-manual-2.4.6-97.0.7.el7_9.5.noarch.rpm	014494abac76c9a4e253227e5c791f7994d1008ac01d9fc8c927f3640e39f03b	ELSA-2024-7101	ol7_x86_64_u9_patch
	httpd-tools-2.4.6-97.0.7.el7_9.5.x86_64.rpm	ef7fd253c41039e9c2b3a5cec21905176b715af97a643303f38130f2a112b48e	ELSA-2024-7101	ol7_x86_64_latest
	httpd-tools-2.4.6-97.0.7.el7_9.5.x86_64.rpm	ef7fd253c41039e9c2b3a5cec21905176b715af97a643303f38130f2a112b48e	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ldap-2.4.6-97.0.7.el7_9.5.x86_64.rpm	0d05165571e764ef754fdc7a05fa3380ee7d834ab23ad7d6b1549c8aeeac157b	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_proxy_html-2.4.6-97.0.7.el7_9.5.x86_64.rpm	6bc2de8013ac5a8d31a14be76a45308ca52249967be2e09625f82d7aa54e5a9f	ELSA-2024-7101	ol7_x86_64_optional_latest
	mod_session-2.4.6-97.0.7.el7_9.5.x86_64.rpm	91d2db4c4186585e823341c21050f9364b1c157b816cee32e451710d97210cf6	ELSA-2024-7101	ol7_x86_64_latest
	mod_session-2.4.6-97.0.7.el7_9.5.x86_64.rpm	91d2db4c4186585e823341c21050f9364b1c157b816cee32e451710d97210cf6	ELSA-2024-7101	ol7_x86_64_u9_patch
	mod_ssl-2.4.6-97.0.7.el7_9.5.x86_64.rpm	5cbe1300b51e59cd224e01b20973c19bc1e5c6d9dee731b03fdc49cad06e3310	ELSA-2024-7101	ol7_x86_64_latest
	mod_ssl-2.4.6-97.0.7.el7_9.5.x86_64.rpm	5cbe1300b51e59cd224e01b20973c19bc1e5c6d9dee731b03fdc49cad06e3310	ELSA-2024-7101	ol7_x86_64_u9_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team