Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

Oracle Linux 8 ELSA-2023-5050 Moderate: HTTPD HTTP Response Splitting

oracle
Calendar Grey September 14, 2023
Oracle Linux Logo Esm H88
Oracle Linux Security Advisory ELSA-2023-5051 releases kernel updates to address vulnerabilities. Check for more information.
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

Summary

httpd [2.4.37-56.0.1.7] - Resolves: #2176723 - CVE-2023-27522 httpd:2.4/httpd: mod_proxy_uwsgi HTTP response splitting [2.4.37-56.0.1.6] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-56.6] - Resolves: #2190133 - mod_rewrite regression with CVE-2023-25690 [2.4.37-56.4] - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy [2.4.37-56] - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling [2.4.37-55] - Resolves: #2155961 - prevent sscg creating /dhparams.pem [2.4.37-54] - Resolves: #2095650 - Dependency from mod_http2 on httpd broken [2.4.37-53] - Resolves: #2050888 - httpd with SSL fails to start unless hostname command was ins...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate severity security patch httpd update response splitting HTTP issue Oracle Linux

SRPMs

https://oss.oracle.com:443/ol8/SRPMS-updates//httpd-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates//mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.src.rpm https://oss.oracle.com:443/ol8/SRPMS-updates//mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.src.rpm

x86_64

httpd-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm httpd-devel-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm httpd-filesystem-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.noarch.rpm httpd-manual-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.noarch.rpm httpd-tools-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.x86_64.rpm mod_ldap-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.x86_64.rpm mod_proxy_html-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm mod_session-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm mod_ssl-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.x86_64.rpm

aarch64

httpd-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm httpd-devel-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm httpd-filesystem-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.noarch.rpm httpd-manual-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.noarch.rpm httpd-tools-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm mod_http2-1.15.7-8.module+el8.8.0+21057+13668aee.3.aarch64.rpm mod_ldap-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm mod_md-2.0.8-8.module+el8.5.0+20475+4f6a8fd5.aarch64.rpm mod_proxy_html-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm mod_session-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm mod_ssl-2.4.37-56.0.1.module+el8.8.0+21159+b5186791.7.aarch64.rpm

Related CVEs: CVE-2023-27522

Topics%20covered

Topics Covered

security advisory moderate severity security patch httpd update response splitting HTTP issue Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here