Skip to content
OpenAdvisories
High ELSA-2021-9545 1 CVE

Important: httpd:2.4 security update (Oracle Linux 8)

Published Nov 11, 2021 · Updated Nov 11, 2021

Ecosystem: Oracle Linux

Summary

httpd
[2.4.37-39.0.2.1]
- mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690]

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 8 httpd 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 httpd-devel 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 httpd-filesystem 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 httpd-manual 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 httpd-tools 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 mod_http2 0:1.15.7-3.module+el8.4.0+20024+b87b2deb
Oracle Linux · 8 mod_ldap 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 mod_md 1:2.0.8-8.module+el8.3.0+7816+49791cfd
Oracle Linux · 8 mod_proxy_html 1:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 mod_session 0:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1
Oracle Linux · 8 mod_ssl 1:2.4.37-39.0.2.module+el8.4.0+20402+038b8ccd.1

Vulnerabilities 1