gpp_maybe Security update for apache2

SUSE-SLE-Module-Basesystem-15-SP4-2023-322

This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#1207251). - CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow request smuggling attacks (bsc#1207250). - CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request header could cause memory corruption (bsc#1207247).

• Release Date
  Feb 8 2023
• References
  Bugzilla: 1207251, 1207247, 1207250
  CVEs: CVE-2006-20001, CVE-2022-36760, CVE-2022-37436
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 aarch64

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.6.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.6.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.6.1 lock rpm

Basesystem Module 15.4 s390x

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.6.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.6.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.6.1 lock rpm

Basesystem Module 15.4 ppc64le

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.6.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.6.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.6.1 lock rpm

Basesystem Module 15.4 x86_64

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.6.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.6.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.6.1 lock rpm