Lucene search

K
oraclelinuxOracleLinuxELSA-2023-1673
HistoryApr 07, 2023 - 12:00 a.m.

httpd:2.4 security update

2023-04-0700:00:00
linux.oracle.com
156
httpd
2.4.37-51.5.0.1
oracle
index page
cve-2023-25690
mod_rewrite
mod_proxy

EPSS

0.015

Percentile

87.0%

httpd
[2.4.37-51.5.0.1]

  • Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262]
  • Replace index.html with Oracle’s index page oracle_index.html
    [2.4.37-51.5]
  • Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy
    [2.4.37-51.1]
  • Resolves: #2165967 - prevent sscg creating /dhparams.pem
  • Resolves: #2165976 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  • Resolves: #2165977 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  • Resolves: #2165978 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling
    mod_http2
    [1.15.7-5.4]
  • Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting
    with mod_rewrite and mod_proxy