Описание
ELSA-2017-2478: httpd security update (IMPORTANT)
[2.2.15-60.0.1.5]
- replace index.html with Oracle's index page oracle_index.html
- update vstring in specfile
[2.2.15-60.5]
- Resolves: #1463194 - CVE-2017-3167 httpd: ap_get_basic_auth_pw() authentication bypass
- Resolves: #1463197 - CVE-2017-3169 httpd: mod_ssl NULL pointer dereference
- Resolves: #1463207 - CVE-2017-7679 httpd: mod_mime buffer overread
- Resolves: #1470748 - CVE-2017-9788 httpd: Uninitialized memory reflection in mod_auth_digest
Обновленные пакеты
Oracle Linux 6
Oracle Linux x86_64
httpd
2.2.15-60.0.1.el6_9.5
httpd-devel
2.2.15-60.0.1.el6_9.5
httpd-manual
2.2.15-60.0.1.el6_9.5
httpd-tools
2.2.15-60.0.1.el6_9.5
mod_ssl
2.2.15-60.0.1.el6_9.5
Oracle Linux i686
httpd
2.2.15-60.0.1.el6_9.5
httpd-devel
2.2.15-60.0.1.el6_9.5
httpd-manual
2.2.15-60.0.1.el6_9.5
httpd-tools
2.2.15-60.0.1.el6_9.5
mod_ssl
2.2.15-60.0.1.el6_9.5