Oracle Errata System Oracle Linux 5.11 2024-09-21T18:50:09 Oracle Linux 6 [2.4.6-22.0.1.el6] - remove enable-tlsv1x-thunks to fit openssl 1.x api - replace index.html with Oracle's index page oracle_index.html - update vstring in specfile [2.4.6-22] - Remove mod_proxy_fcgi fix for heap-based buffer overflow, httpd-2.4.6 is not affected (CVE-2014-3583) [2.4.6-21] - mod_proxy_wstunnel: Fix the use of SSL with the 'wss:' scheme (#1141950) [2.4.6-20] - core: fix bypassing of mod_headers rules via chunked requests (CVE-2013-5704) - mod_cache: fix NULL pointer dereference on empty Content-Type (CVE-2014-3581) - mod_proxy_fcgi: fix heap-based buffer overflow (CVE-2014-3583) [2.4.6-19] - mod_cgid: add security fix for CVE-2014-0231 - mod_proxy: add security fix for CVE-2014-0117 - mod_deflate: add security fix for CVE-2014-0118 - mod_status: add security fix for CVE-2014-0226 - mod_cache: add secutiry fix for CVE-2013-4352 LOW Copyright 2016 Oracle, Inc. CVE-2013-5704 CVE-2014-3581 cpe:/a:oracle:linux:6::SoftwareCollections cpe:/a:oracle:linux:6::SoftwareCollections12