[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ELSA-2021-4257 -- Oracle mod_md_httpd_mod_http2_mod_ldap_mod_proxy_html_mod_session_mod_ssl

ID: oval:org.secpod.oval:def:1505203Date: (C)2021-11-24   (M)2024-01-29
Class: PATCHFamily: unix




httpd [2.4.37-41.0.1] - Add checks on the configured UDS path [Orabug: 33412270][CVE-2021-40438] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracles index page oracle_index.html [2.4.37-41] - Resolves: #1680111 - httpd sends reply to HTTPS GET using two TLS records - Resolves: #1905613 - mod_ssl does not like valid certificate chain - Resolves: #1935742 - [RFE] backport samesite/httponly/secure flags for usertrack - Resolves: #1972500 - CVE-2021-30641 httpd:2.4/httpd: MergeSlashes regression - Resolves: #1968307 - CVE-2021-26690 httpd:2.4/httpd: mod_session NULL pointer dereference in parser - Resolves: #1934741 - Apache trademark update - new logo [2.4.37-40] - Resolves: #1952557 - mod_proxy_wstunnel.html is a malformed XML - Resolves: #1937334 - SSLProtocol with based virtual hosts mod_http2 [1.15.7-3] - Resolves: #1869077 - CVE-2020-11993 httpd:2.4/mod_http2: httpd: mod_http2 concurrent pool usage mod_md [1:2.0.8-8] - Resolves: #1832844 - mod_md does not work with ACME server that does not provide keyChange or revokeCert resources

Platform:
Oracle Linux 8
Product:
mod_md
httpd
mod_http2
mod_ldap
mod_proxy_html
mod_session
mod_ssl
Reference:
ELSA-2021-4257
CVE-2021-26690
CVE-2021-30641
CVE    2
CVE-2021-30641
CVE-2021-26690
CPE    8
cpe:/a:apache:http_server
cpe:/a:apache:mod_proxy_html
cpe:/a:apache:mod_session
cpe:/a:apache:mod_http2
...

© SecPod Technologies