Medium ELSA-2025-9466 1 CVE

Moderate: mod_proxy_cluster security update (Oracle Linux 10)

Published Jun 27, 2025 · Updated Jun 27, 2025

Ecosystem: Oracle Linux

Summary

[1.3.22-1.el10_0.2]
- Resolves: RHEL-82256 - Update deprecated misspeled EnableMCPMReceive directive

[1.3.22-1.el10_0.1]
- Resolves: RHEL-80796 - Rebase mod_proxy_cluster to upstream 1.3.22.Final release

[1.3.22-1]
- Resolves: RHEL-80480 Rebase mod_proxy_cluster to upstream 1.3.22.Final release

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 10	mod_proxy_cluster	0:1.3.22-1.el10_0.2

Vulnerabilities 1

Medium 5.4

CVE-2024-10306

Mod_proxy_cluster: mod_proxy_cluster unauthorized mcmp requests

A vulnerability was found in mod_proxy_cluster. The issue is that the <Directory> directive should be replaced by the <Location> directive as the former does not restrict IP/host access as `Require ip IP_ADDRESS` would suggest. This means that anyone with acc…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 9.4 Extended Update Support Linux

Apr 23, 2025