shield Security update for apache2

SUSE-SLE-Module-Basesystem-15-SP2-2020-2311

This update for apache2 fixes the following issues: - CVE-2020-9490: Fixed a crash caused by a specially crafted value for the 'Cache-Digest' header in a HTTP/2 request (bsc#1175071). - CVE-2020-11984: Fixed an information disclosure bug in mod_proxy_uwsgi (bsc#1175074). - CVE-2020-11993: When trace/debug was enabled for the HTTP/2 module logging statements were made on the wrong connection (bsc#1175070). - Solve a crash in mod_proxy_uwsgi for empty values of environment variables. (bsc#1174052)

• Release Date
  Aug 25 2020
• References
  Bugzilla: 1174052, 1175070, 1175071, 1175074
  CVEs: CVE-2020-9490, CVE-2020-11984, CVE-2020-11993
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.2 aarch64

• Packages
  apache2
  The Apache Web Server

  2.4.43-3.5.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.43-3.5.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.43-3.5.1 lock rpm

Basesystem Module 15.2 ppc64le

• Packages
  apache2
  The Apache Web Server

  2.4.43-3.5.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.43-3.5.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.43-3.5.1 lock rpm

Basesystem Module 15.2 s390x

• Packages
  apache2
  The Apache Web Server

  2.4.43-3.5.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.43-3.5.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.43-3.5.1 lock rpm

Basesystem Module 15.2 x86_64

• Packages
  apache2
  The Apache Web Server

  2.4.43-3.5.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.43-3.5.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.43-3.5.1 lock rpm