Summary
[1.3.22-1.el9_6.1]
- Resolves: RHEL-81070 Rebase mod_proxy_cluster to upstream 1.3.22.Final release
[1.3.20-1]
- Rebase mod_cluster to upstream 1.3.20.Final tag
- Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | mod_proxy_cluster | 0:1.3.22-1.el9_6.1 |
Vulnerabilities 1
-
Medium 5.4
Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests
A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with acc…