Summary
httpd
[2.4.37-65.0.1]
- Replace index.html with Oracle's index page oracle_index.html
[2.4.37-65]
- Resolves: RHEL-31857 - httpd:2.4/httpd: HTTP response
splitting (CVE-2023-38709)
mod_http2
mod_md
Fixed packages 11
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | httpd | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | httpd-devel | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | httpd-filesystem | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | httpd-manual | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | httpd-tools | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | mod_http2 | 0:1.15.7-10.module+el8.10.0+90327+96b8ea28 |
| Oracle Linux · 8 | mod_ldap | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | mod_md | 1:2.0.8-8.module+el8.9.0+90011+2f9c6a23 |
| Oracle Linux · 8 | mod_proxy_html | 1:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | mod_session | 0:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
| Oracle Linux · 8 | mod_ssl | 1:2.4.37-65.0.1.module+el8.10.0+90356+f7b9d583 |
Vulnerabilities 1
-
High 7.3CVE-2023-38709 Public exploit
Apache HTTP Server: HTTP response splitting
Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses. This issue affects Apache HTTP Server: through 2.4.58.