Medium ELSA-2019-3436 2 CVEs

Moderate: httpd:2.4 security and bug fix update (Oracle Linux 8)

Published Nov 14, 2019 · Updated Nov 14, 2019

Ecosystem: Oracle Linux

Fixed packages 11

Release	Package	Fixed in
Oracle Linux · 8	httpd	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	httpd-devel	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	httpd-filesystem	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	httpd-manual	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	httpd-tools	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_http2	0:1.11.3-3.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_ldap	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_md	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_proxy_html	1:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_session	0:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33
Oracle Linux · 8	mod_ssl	1:2.4.37-16.0.1.module+el8.1.0+5385+dcd9ff33

Vulnerabilities 2

Unscored —

CVE-2019-0217 Public exploit EPSS 16%

In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded serv…

Apache Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Apr 8, 2019
Unscored —

CVE-2019-0220 EPSS 18%

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains mult…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Jun 11, 2019