Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2022:2099-1

UNKNOWN

Security update for apache2

Published Jun 16, 2022

Modified 3 years ago

Fix available

Details

This update for apache2 fixes the following issues:

CVE-2022-26377: Fixed possible request smuggling in mod_proxy_ajp (bsc#1200338)
CVE-2022-28614: Fixed read beyond bounds via ap_rwrite() (bsc#1200340)
CVE-2022-28615: Fixed read beyond bounds in ap_strcmp_match() (bsc#1200341)
CVE-2022-29404: Fixed denial of service in mod_lua r:parsebody (bsc#1200345)
CVE-2022-30556: Fixed information disclosure in mod_lua with websockets (bsc#1200350)
CVE-2022-30522: Fixed mod_sed denial of service (bsc#1200352)
CVE-2022-31813: Fixed mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism (bsc#1200348)

Affected Packages

SUSE:HPE Helion OpenStack 8apache2

Fixed in:

2.4.23-29.91.1

SUSE:HPE Helion OpenStack 8apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:HPE Helion OpenStack 8apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:HPE Helion OpenStack 8apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:HPE Helion OpenStack 8apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:HPE Helion OpenStack 8apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP2-BCLapache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-BCLapache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP3-LTSSapache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server 12 SP4-LTSSapache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP3apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP4apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 8apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud 9apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 8apache2-worker

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2-doc

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2-example-pages

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2-prefork

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2-utils

Fixed in:

2.4.23-29.91.1

SUSE:OpenStack Cloud Crowbar 9apache2-worker

Fixed in:

2.4.23-29.91.1

References

REPORThttps://bugzilla.suse.com/1200338 REPORThttps://bugzilla.suse.com/1200340 REPORThttps://bugzilla.suse.com/1200341 REPORThttps://bugzilla.suse.com/1200345 REPORThttps://bugzilla.suse.com/1200348 REPORThttps://bugzilla.suse.com/1200350 REPORThttps://bugzilla.suse.com/1200352 WEBhttps://www.suse.com/security/cve/CVE-2022-26377 WEBhttps://www.suse.com/security/cve/CVE-2022-28614 WEBhttps://www.suse.com/security/cve/CVE-2022-28615 WEBhttps://www.suse.com/security/cve/CVE-2022-29404 WEBhttps://www.suse.com/security/cve/CVE-2022-30522 WEBhttps://www.suse.com/security/cve/CVE-2022-30556 WEBhttps://www.suse.com/security/cve/CVE-2022-31813 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20222099-1/

SUSE-SU-2022:2099-1 | Mondoo Vulnerability Intelligence