Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2023:0294-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2023:0294-1

UNKNOWN

Security update for apache2

Published Feb 7, 2023

Modified 2 years ago

Fix available

Details

This update for apache2 fixes the following issues:

CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#1207251).
CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow request smuggling attacks (bsc#1207250).
CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request header could cause memory corruption (bsc#1207247).

Affected Packages

SUSE:Enterprise Storage 6apache2

Fixed in:

2.4.33-150000.3.72.1

SUSE:Enterprise Storage 6apache2-devel

Fixed in:

2.4.33-150000.3.72.1

SUSE:Enterprise Storage 6apache2-doc

Fixed in:

2.4.33-150000.3.72.1

SUSE:Enterprise Storage 6apache2-prefork

Fixed in:

2.4.33-150000.3.72.1

SUSE:Enterprise Storage 6apache2-utils

Fixed in:

2.4.33-150000.3.72.1

SUSE:Enterprise Storage 6apache2-worker

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2-devel

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2-doc

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2-prefork

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2-utils

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSapache2-worker

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2-devel

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2-doc

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2-prefork

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2-utils

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server 15 SP1-LTSSapache2-worker

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2-devel

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2-doc

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2-prefork

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2-utils

Fixed in:

2.4.33-150000.3.72.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1apache2-worker

Fixed in:

2.4.33-150000.3.72.1

Timeline

PublishedFeb 7, 2023

ModifiedFeb 7, 2023

SUSE-SU-2023:0294-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline