gpp_maybe Security update for apache2

SUSE-SLE-Module-Basesystem-15-SP5-2024-2624

This update for apache2 fixes the following issues: - CVE-2024-38475: Fixed improper escaping of output in mod_rewrite (bsc#1227268) - CVE-2024-38476: Fixed server may use exploitable/malicious backend application output to run local handlers via internal redirect (bsc#1227269) - CVE-2024-38477: Fixed null pointer dereference in mod_proxy (bsc#1227270) - CVE-2024-39573: Fixed potential SSRF in mod_rewrite (bsc#1227271)

• Release Date
  Jul 30 2024
• References
  Bugzilla: 1227268, 1227269, 1227270, 1227271
  CVEs: CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.5 s390x

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.29.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.29.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.29.1 lock rpm

Basesystem Module 15.5 ppc64le

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.29.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.29.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.29.1 lock rpm

Basesystem Module 15.5 aarch64

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.29.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.29.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.29.1 lock rpm

Basesystem Module 15.5 x86_64

• Packages
  apache2
  The Apache Web Server

  2.4.51-150400.6.29.1 lock rpm lock src

  apache2-prefork
  Apache 2 "prefork" MPM (Multi-Processing Module)

  2.4.51-150400.6.29.1 lock rpm

  apache2-utils
  Apache 2 utilities

  2.4.51-150400.6.29.1 lock rpm