Skip to content
OpenAdvisories
Medium ELSA-2024-2278 1 CVE

Moderate: httpd security update (Oracle Linux 9)

Published May 3, 2024 · Updated May 3, 2024

Summary

[2.4.57-8.0.1]
- Replace index.html with Oracle's index page oracle_index.html.

[2.4.57-8]
- mod_xml2enc: fix media type handling
Resolves: RHEL-17686
- mod_dav: add DavBasePath
Resolves: RHEL-6600

[2.4.57-7]
- Resolves: RHEL-14447 - httpd: mod_macro: out-of-bounds read
vulnerability (CVE-2023-31122)

[2.4.57-6]
- Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
- mod_dav_fs: add global mutex around lockdb interaction

Fixed packages 11

ReleasePackageFixed in
Oracle Linux · 9 httpd 0:2.4.57-8.0.1.el9
Oracle Linux · 9 httpd-core 0:2.4.57-8.0.1.el9
Oracle Linux · 9 httpd-devel 0:2.4.57-8.0.1.el9
Oracle Linux · 9 httpd-filesystem 0:2.4.57-8.0.1.el9
Oracle Linux · 9 httpd-manual 0:2.4.57-8.0.1.el9
Oracle Linux · 9 httpd-tools 0:2.4.57-8.0.1.el9
Oracle Linux · 9 mod_ldap 0:2.4.57-8.0.1.el9
Oracle Linux · 9 mod_lua 0:2.4.57-8.0.1.el9
Oracle Linux · 9 mod_proxy_html 1:2.4.57-8.0.1.el9
Oracle Linux · 9 mod_session 0:2.4.57-8.0.1.el9
Oracle Linux · 9 mod_ssl 1:2.4.57-8.0.1.el9

Vulnerabilities 1