SUSE-SU-2022:14924-1

Details

Description of the patch:

This update for apache2 fixes the following issues:

CVE-2022-22720: HTTP request smuggling due to incorrect error handling (bsc#1197095).
CVE-2022-22721: possible buffer overflow with very large or unlimited LimitXMLRequestBody (bsc#1197096).

Affected Packages

apache2

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

apache2-devel

SUSE Linux Enterprise Point of Sale 11 SP3

Fixed in:

2.2.34-70.41.1

apache2-doc

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

apache2-example-pages

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

apache2-prefork

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

apache2-utils

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

apache2-worker

SUSE Linux Enterprise Point of Sale 11 SP3SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server 11 SP4-LTSS

Fixed in:

2.2.34-70.41.1

References