SUSE-SU-2022:0091-1

CRITICAL9.8

Security update for apache2

Published Jan 17, 2022

Modified 4 years ago

Fix available

Details

Description of the patch:

This update for apache2 fixes the following issues:

Apache2 was updated to the current stable version 2.4.51 (jsc#SLE-22733 jsc#SLE-22849)

It fixes all CVEs and selected bugs represented by patches found between 2.4.23 and 2.4.51.

See https://downloads.apache.org/httpd/CHANGES_2.4 for a complete change log.

Also fixed:

CVE-2021-44224: Fixed NULL dereference or SSRF in forward proxy configurations (bsc#1193943)
CVE-2021-44790: Fixed buffer overflow when parsing multipart content in mod_lua (bsc#1193942)

Affected Packages

apache2

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

2.4.51-3.37.1

apache2-prefork

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

2.4.51-3.37.1

apache2-utils

SUSE Enterprise Storage 7SUSE Enterprise Storage 7.1SUSE Linux Enterprise Desktop 15 SP2SUSE Linux Enterprise Desktop 15 SP3SUSE Linux Enterprise High Performance Computing 15 SP2

Fixed in:

2.4.51-3.37.1

apache2-event

SUSE Linux Enterprise Module for Package Hub 15 SP3

Fixed in:

2.4.51-3.37.1

apache2-devel

SUSE Linux Enterprise Module for Server Applications 15 SP2SUSE Linux Enterprise Module for Server Applications 15 SP3

Fixed in:

2.4.51-3.37.1

apache2-doc

SUSE Linux Enterprise Module for Server Applications 15 SP2SUSE Linux Enterprise Module for Server Applications 15 SP3