Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Oracle Linux 7 ELSA-2023-1593 Critical: HTTPD Security Issues

oracle
Calendar Grey April 5, 2023
Scroller Oracle
Ubuntu announced ELSA-2023-2048 targeting SSL vulnerabilities for arm64, featuring essential patches and enhancements.
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

Summary

[2.4.6-98.0.3] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850] - mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690] [2.4.6-98.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-97.7] - Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy

Topics%20covered

Topics Covered

security advisory security update httpd important HTTP issue Oracle Linux aarch64

SRPMs

https://oss.oracle.com:443/ol7/SRPMS-updates//httpd-2.4.6-98.0.3.el7_9.7.src.rpm

x86_64

aarch64

httpd-2.4.6-98.0.3.el7_9.7.aarch64.rpm httpd-devel-2.4.6-98.0.3.el7_9.7.aarch64.rpm httpd-manual-2.4.6-98.0.3.el7_9.7.noarch.rpm httpd-tools-2.4.6-98.0.3.el7_9.7.aarch64.rpm mod_session-2.4.6-98.0.3.el7_9.7.aarch64.rpm mod_ssl-2.4.6-98.0.3.el7_9.7.aarch64.rpm mod_ldap-2.4.6-98.0.3.el7_9.7.aarch64.rpm mod_proxy_html-2.4.6-98.0.3.el7_9.7.aarch64.rpm

Severity
critical
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2023-25690

Topics%20covered

Topics Covered

security advisory security update httpd important HTTP issue Oracle Linux aarch64

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.