Summary
[2.4.6-89.0.1]
- replace index.html with Oracle's index page oracle_index.html
[2.4.6-89.1]
- Resolves: #1719722 - CVE-2018-1312 httpd: Weak Digest auth nonce generation
in mod_auth_digest
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | httpd | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | httpd-devel | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | httpd-manual | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | httpd-tools | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | mod_ldap | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | mod_proxy_html | 1:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | mod_session | 0:2.4.6-89.0.1.el7_6.1 |
| Oracle Linux · 7 | mod_ssl | 1:2.4.6-89.0.1.el7_6.1 |
Vulnerabilities 1
-
Unscored —CVE-2018-1312 EPSS 16%
In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent rep…