Lucene search

K
oraclelinuxOracleLinuxELSA-2017-2478
HistoryAug 15, 2017 - 12:00 a.m.

httpd security update

2017-08-1500:00:00
linux.oracle.com
53

EPSS

0.468

Percentile

97.5%

[2.2.15-60.0.1.5]

  • replace index.html with Oracle’s index page oracle_index.html
  • update vstring in specfile
    [2.2.15-60.5]
  • Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw()
    authentication bypass
  • Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
  • Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
  • Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection
    in mod_auth_digest