Summary
httpd
[2.4.57-5.0.1]
- Replace index.html with Oracle's index page oracle_index.html.
[2.4.57-5]
- Fix issue found by covscan
- Related: #2222001
[2.4.57-4]
- Resolves: #2217726 - Make PROPFIND tolerant of deletion race
[2.4.57-3]
- Resolves: #2222001 - mod_status lists BusyWorkers IdleWorkers keys twice
[2.4.57-2]
- Resolves: #2186645 - Fix issue found by covscan in httpd package
- Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi
[2.4.57-1]
- Resolves: #2184403 - rebase httpd to 2.4.57
- Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy
mod_http2
[1.15.19-5]
- Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
mod_rewrite and mod_proxy
Fixed packages 12
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | httpd | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | httpd-core | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | httpd-devel | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | httpd-filesystem | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | httpd-manual | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | httpd-tools | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | mod_http2 | 0:1.15.19-5.el9 |
| Oracle Linux · 9 | mod_ldap | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | mod_lua | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | mod_proxy_html | 1:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | mod_session | 0:2.4.57-5.0.1.el9 |
| Oracle Linux · 9 | mod_ssl | 1:2.4.57-5.0.1.el9 |
Vulnerabilities 1
-
High 7.5
Apache HTTP Server: mod_proxy_uwsgi HTTP response splitting
HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special characters in the origin response header can truncate/split the response forwarded to the client.