Summary
httpd
[2.4.37-47.0.1.2]
- Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
- Replace index.html with Oracle's index page oracle_index.html
[2.4.37-47.2]
- Resolves: #2097247 - CVE-2020-13950 httpd:2.4/httpd: mod_proxy NULL pointer
dereference
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | mod_http2 | 0:1.15.7-5.module+el8.6.0+20548+01710940 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | mod_md | 1:2.0.8-8.module+el8.5.0+20475+4f6a8fd5 |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | mod_session | 0:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-47.0.1.module+el8.6.0+20683+407db9f5.2 |
Vulnerabilities 1
-
Unscored —CVE-2020-13950 EPSS 50%
mod_proxy_http NULL pointer dereference
Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service