1. Home
  2. Security Advisories
  3. Oracle Linux
  4. ELSA-2024-1786

[ELSA-2024-1786] httpd:2.4/mod_http2 security update

Severity Important
Affected Packages 11
CVEs 1
Info Packages References Vulnerabilities

httpd
mod_http2
[1.15.7-8.5]
- Resolves: RHEL-29816 - httpd:2.4/mod_http2: httpd: CONTINUATION frames
DoS (CVE-2024-27316)

mod_md

Package Affected Version
pkg:rpm/oraclelinux/mod_ssl?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/mod_session?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/mod_proxy_html?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/mod_md?distro=oraclelinux-8.9 < 2.0.8-8.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/mod_ldap?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/mod_http2?distro=oraclelinux-8.9 < 1.15.7-8.module+el8.9.0+90299+1db10a42.5
pkg:rpm/oraclelinux/httpd?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/httpd-tools?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/httpd-manual?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/httpd-filesystem?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
pkg:rpm/oraclelinux/httpd-devel?distro=oraclelinux-8.9 < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23
ID
ELSA-2024-1786
Severity
important
URL
https://linux.oracle.com/errata/ELSA-2024-1786.html
Published
2024-04-11T00:00:00
(5 months ago)
Modified
2024-04-11T00:00:00
(5 months ago)
Rights
Copyright 2024 Oracle, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/oraclelinux/mod_ssl?distro=oraclelinux-8.9 oraclelinux mod_ssl < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/mod_session?distro=oraclelinux-8.9 oraclelinux mod_session < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/mod_proxy_html?distro=oraclelinux-8.9 oraclelinux mod_proxy_html < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/mod_md?distro=oraclelinux-8.9 oraclelinux mod_md < 2.0.8-8.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/mod_ldap?distro=oraclelinux-8.9 oraclelinux mod_ldap < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/mod_http2?distro=oraclelinux-8.9 oraclelinux mod_http2 < 1.15.7-8.module+el8.9.0+90299+1db10a42.5 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/httpd?distro=oraclelinux-8.9 oraclelinux httpd < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/httpd-tools?distro=oraclelinux-8.9 oraclelinux httpd-tools < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/httpd-manual?distro=oraclelinux-8.9 oraclelinux httpd-manual < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/httpd-filesystem?distro=oraclelinux-8.9 oraclelinux httpd-filesystem < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
Affected pkg:rpm/oraclelinux/httpd-devel?distro=oraclelinux-8.9 oraclelinux httpd-devel < 2.4.37-62.0.1.module+el8.9.0+90011+2f9c6a23 oraclelinux-8.9
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date