Skip to content
OpenAdvisories
Medium ELSA-2017-2882 1 CVE

Moderate: httpd security update (Oracle Linux 7)

Published Oct 11, 2017 · Updated Oct 11, 2017

Ecosystem: Oracle Linux

Summary

[2.4.6-67.0.1.el7_4.5]
- replace index.html with Oracle's index page oracle_index.html

[2.4.6-67.5]
- Resolves: #1493064 - CVE-2017-9798 httpd: Use-after-free by limiting
unregistered HTTP method

Fixed packages 8

ReleasePackageFixed in
Oracle Linux · 7 httpd 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 httpd-devel 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 httpd-manual 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 httpd-tools 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 mod_ldap 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 mod_proxy_html 1:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 mod_session 0:2.4.6-67.0.1.el7_4.5
Oracle Linux · 7 mod_ssl 1:2.4.6-67.0.1.el7_4.5

Vulnerabilities 1