Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Oracle Linux 7: ELSA-2021-9619 Important Update for httpd Security

oracle
Calendar Grey December 16, 2021
Scroller Oracle
Critical updates are available in Oracle Linux Advisory ELSA-2021-9619 for httpd affecting security risks.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[2.4.6-97.0.5.2] - scoreboard: fix null pointer deference [Orabug: 33561206][CVE-2021-34798] - fix ap_escape_quote logic [Orabug: 33617690][CVE-2021-39275]

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates/httpd-2.4.6-97.0.5.el7_9.2.src.rpm

x86_64

aarch64

httpd-2.4.6-97.0.5.el7_9.2.aarch64.rpm httpd-devel-2.4.6-97.0.5.el7_9.2.aarch64.rpm httpd-manual-2.4.6-97.0.5.el7_9.2.noarch.rpm httpd-tools-2.4.6-97.0.5.el7_9.2.aarch64.rpm mod_session-2.4.6-97.0.5.el7_9.2.aarch64.rpm mod_ssl-2.4.6-97.0.5.el7_9.2.aarch64.rpm mod_ldap-2.4.6-97.0.5.el7_9.2.aarch64.rpm mod_proxy_html-2.4.6-97.0.5.el7_9.2.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2021-34798 CVE-2021-39275

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.