ELSA-2022-9676

ELSA-2022-9676 - httpd security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2022-08-04

Description

[2.2.15-69.0.4]
- mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and
fixup last [CVE-2022-31813][Orabug: 34317859]

[2.2.15-69.0.3]
- core: Simpler connection close logic [CVE-2022-22720][Orabug: 33991577]

Related CVEs

CVE-2022-31813

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 6 (i386)	httpd-2.2.15-69.0.4.el6.src.rpm	597fb17654bc2ae80f9c09078a1d8dbf	-
	httpd-2.2.15-69.0.4.el6.i686.rpm	9ed01ff194836eda67505337a2afeb9b	-
	httpd-devel-2.2.15-69.0.4.el6.i686.rpm	e03a30fd8b87e330dda5b4e5d148c29a	-
	httpd-manual-2.2.15-69.0.4.el6.noarch.rpm	04d54c458bfaebbe72d5eccc4c8197b5	-
	httpd-tools-2.2.15-69.0.4.el6.i686.rpm	a0328f3b81c046eaef1d644fe981432a	-
	mod_ssl-2.2.15-69.0.4.el6.i686.rpm	fe8ac5f7a34ba407182e22e7b146d5fb	-
Oracle Linux 6 (x86_64)	httpd-2.2.15-69.0.4.el6.src.rpm	597fb17654bc2ae80f9c09078a1d8dbf	-
	httpd-2.2.15-69.0.4.el6.x86_64.rpm	09a22cd74100851842905b74cc5a7b8a	-
	httpd-devel-2.2.15-69.0.4.el6.i686.rpm	e03a30fd8b87e330dda5b4e5d148c29a	-
	httpd-devel-2.2.15-69.0.4.el6.x86_64.rpm	890b532a26abe553fbb03702b288d5b5	-
	httpd-manual-2.2.15-69.0.4.el6.noarch.rpm	04d54c458bfaebbe72d5eccc4c8197b5	-
	httpd-tools-2.2.15-69.0.4.el6.x86_64.rpm	7f7cbe97aec3cc0433817d129ba9e03d	-
	mod_ssl-2.2.15-69.0.4.el6.x86_64.rpm	43fe5ac935e43242f41eb1824d12e278	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team