Описание
ELSA-2026-92616: httpd:2.4 security, bug fix, and enhancement update (IMPORTANT)
httpd [2.4.37-65.0.1.8]
- Replace index.html with Oracle's index page oracle_index.html
[2.4.37-65.8]
- Resolves: RHEL-173558 - httpd:2.4/httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780)
- Resolves: RHEL-175074 - httpd:2.4/httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007)
- Resolves: RHEL-175088 - httpd:2.4/httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857)
- Resolves: RHEL-175620 - httpd:2.4/httpd: NULL pointer dereference via specially crafted request (CVE-2026-29169)
- Resolves: RHEL-175055 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059)
mod_http2 mod_md [1:2.0.8-8.4]
- Resolves: RHEL-251674 - fix segfault when await_valid times out and prevent repeated CSR submission after restart
[1:2.0.8-8.3]
- Resolves: RHEL-247701 - fix CPU spikes from CVE-2025-55753 patch
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module httpd:2.4 is enabled
httpd
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-devel
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-filesystem
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-manual
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-tools
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_http2
1.15.7-10.module+el8.10.0+91023+3994037c.7
mod_ldap
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_md
2.0.8-8.module+el8.10.0+91092+d4ec9ae3.4
mod_proxy_html
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_session
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_ssl
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
Oracle Linux x86_64
Module httpd:2.4 is enabled
httpd
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-devel
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-filesystem
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-manual
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
httpd-tools
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_http2
1.15.7-10.module+el8.10.0+91023+3994037c.7
mod_ldap
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_md
2.0.8-8.module+el8.10.0+91092+d4ec9ae3.4
mod_proxy_html
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_session
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
mod_ssl
2.4.37-65.0.1.module+el8.10.0+91092+d4ec9ae3.8
