Описание
ELSA-2022-9276: httpd:2.4 security update (IMPORTANT)
[2.4.37-43.0.3.3]
- Resolves: CVE-2021-33193 a crafted method sent through HTTP/2 will bypass validation [Orabug: 33942809]
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module httpd:2.4 is enabled
httpd
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-devel
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-filesystem
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-manual
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-tools
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_ldap
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_proxy_html
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_session
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_ssl
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
Oracle Linux x86_64
Module httpd:2.4 is enabled
httpd
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-devel
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-filesystem
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-manual
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
httpd-tools
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_ldap
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_proxy_html
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_session
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
mod_ssl
2.4.37-43.0.3.module+el8.5.0+20624+5d3b49d0.3
Связанные CVE
Связанные уязвимости
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.
A crafted method sent through HTTP/2 will bypass validation and be for ...
