Summary
httpd
[2.4.37-11.0.1]
- Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
- Replace index.html with Oracle's index page oracle_index.html
[2.4.37-11]
- Resolves: #1695431 - CVE-2019-0211 httpd: privilege escalation
from modules scripts
- Resolves: #1696090 - CVE-2019-0215 httpd:2.4/httpd: mod_ssl: access control
bypass when using per-location client certification authentication
mod_http2
[1.11.3-2]
- update release (#1695587)
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_http2 | 0:1.11.3-2.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_md | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_session | 0:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-11.0.1.module+el8.0.0+5209+a98d70d6 |
Vulnerabilities 2
-
High 7.8
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileg…
KEV Nov 3, 2021 -
Unscored —CVE-2019-0215 EPSS 10%
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verif…