Summary
[2.4.6-45.0.1.4]
- replace index.html with Oracle's index page oracle_index.html
[2.4.6-45.4]
- Resolves: #1396197 - Backport: mod_proxy_wstunnel - AH02447: err/hup
on backconn
[2.4.6-45.3]
- prefork: fix delay completing graceful restart (#1327624)
- mod_ldap: fix authz regression, failing to rebind (#1415257)
[2.4.6-45.2]
- updated patch for CVE-2016-8743
[2.4.6-45.1]
- Resolves: #1412975 - CVE-2016-0736 CVE-2016-2161 CVE-2016-8743 httpd: various
flaws
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | httpd | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | httpd-devel | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | httpd-manual | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | httpd-tools | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | mod_ldap | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | mod_proxy_html | 1:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | mod_session | 0:2.4.6-45.0.1.el7_3.4 |
| Oracle Linux · 7 | mod_ssl | 1:2.4.6-45.0.1.el7_3.4 |
Vulnerabilities 3
-
Unscored —
In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured …
-
Unscored —CVE-2016-2161 EPSS 21%
In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and e…
-
Unscored —CVE-2016-8743 EPSS 13%
Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests an…